CVE-2018-1355

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature. An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Jun 27, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-135507.5The mintToken function of a smart contract implementation for Coquinho Coin (CQNC) (Contract Name: CoquinhoERC20), an Ethereum token, has anCVE-2018-135517.5The mintToken function of a smart contract implementation for Bgamecoin, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-135527.5The mintToken function of a smart contract implementation for Trabet_Coin_PreICO, an Ethereum token, has an integer overflow that allows theCVE-2018-135537.5The mintToken function of a smart contract implementation for Micro BTC (MBTC), an Ethereum token, has an integer overflow that allows the oCVE-2018-135547.5The mintToken function of a smart contract implementation for MoneyTree (TREE), an Ethereum token, has an integer overflow that allows the oCVE-2018-135557.5The mintToken function of a smart contract implementation for JaxBox, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-135567.5The mintToken function of a smart contract implementation for COSMOTokenERC20, an Ethereum token, has an integer overflow that allows the owCVE-2018-135577.5The mintToken function of a smart contract implementation for Trabet_Coin, an Ethereum token, has an integer overflow that allows the owner CVE-2018-135587.5The mintToken function of a smart contract implementation for rhovit, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-135597.5The mintToken function of a smart contract implementation for UTCT, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-13566.1A reflected Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiSandbox before 3.0 may allow an attacker to execute unauthorized code CVE-2018-135607.5The mintToken function of a smart contract implementation for KelvinToken, an Ethereum token, has an integer overflow that allows the owner
CVE-2018-1355: Medium severity, CVSS 6.1 | Vulnix