CVE-2018-1351

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.6 and below versions allows attacker to execute HTML/javascript code via managed remote devices CLI commands by viewing the remote device CLI config installation log.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jun 28, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135107.5The mintToken function of a smart contract implementation for Welfare Token Fund (WTF), an Ethereum token, has an integer overflow that alloCVE-2018-135117.5The mintToken function of a smart contract implementation for CorelliCoin, an Ethereum token, has an integer overflow that allows the owner CVE-2018-135127.5The mintToken function of a smart contract implementation for SmartHomeCoin, an Ethereum token, has an integer overflow that allows the owneCVE-2018-135137.5The mintToken function of a smart contract implementation for Ubiou, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-135147.5The mintToken function of a smart contract implementation for esportz, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-135157.5The mintToken function of a smart contract implementation for aman, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-135167.5The mintToken function of a smart contract implementation for Super Cool Awesome Money (SCAM), an Ethereum token, has an integer overflow thCVE-2018-135177.5The mintToken function of a smart contract implementation for C3 Token (C3), an Ethereum token, has an integer overflow that allows the owneCVE-2018-135187.5The mintToken function of a smart contract implementation for TCash, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-135197.5The mint function of a smart contract implementation for DigitalCloudToken, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-13529.8A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variabCVE-2018-135207.5The mintToken function of a smart contract implementation for TopscoinAdvanced, an Ethereum token, has an integer overflow that allows the o
CVE-2018-1351: Medium severity, CVSS 4.8 | Vulnix