We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2017-3125



Assignerfortinet
Reserved2016-12-02
Published2017-04-12
Updated2024-10-25

Description

An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.

Product status

5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8
affected

References

http://fortiguard.com/psirt/FG-IR-17-011

http://www.securityfocus.com/bid/97474 (97474) vdb-entry

cve.org CVE-2017-3125

nvd.nist.gov CVE-2017-3125

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.