CVE-2017-3131

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Fortinet, Inc.	Fortinet FortiOS	FortiOS versions 5.4.0 through 5.4.4 and 5.6.0

References

http://www.securityfocus.com/bid/100009Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039020Third Party Advisory, VDB Entry
https://fortiguard.com/advisory/FG-IR-17-104Mitigation, Vendor Advisory
https://www.exploit-db.com/exploits/42388/Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/100009Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039020Third Party Advisory, VDB Entry
https://fortiguard.com/advisory/FG-IR-17-104Mitigation, Vendor Advisory
https://www.exploit-db.com/exploits/42388/Third Party Advisory, VDB Entry

Timeline

Published: Sep 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-31326.1A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or command CVE-2017-31336.1A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or command CVE-2017-31347.2An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI co CVE-2017-31355.9Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading CVE-2017-31365.9A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and terminate. An attacker CVE-2017-31377.5Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead CVE-2017-31385.3named contains a feature which allows operators to issue commands to a running server by communicating with the server process over a contro CVE-2017-31397.5A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexp CVE-2017-31405.9If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endles CVE-2017-31417.8The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file s CVE-2017-31423.7An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be ab CVE-2017-31435.9An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name for the z