CVE-2017-7343

MEDIUM

Fortinet FortiPortal <4.0.0 - Open Redirect

Title source: llm

Description

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter.

References (1)

[Vendor Advisory] https://fortiguard.com/psirt/FG-IR-17-114

Scores

CVSS v3 6.1

EPSS 0.0027

EPSS Percentile 50.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-601

Status published

Products (2)

fortinet/fortiportal < 4.0.0

Fortinet, Inc./Fortinet FortiPortal < FortiPortal 4.0.0 and below

Published May 27, 2017

Tracked Since Feb 18, 2026