Fortinet FortiOS <=5.2.3 - Cross-Site Scripting

披露于 2015/05/12 · 更新于 2025/07/17

CVSS 评分4.3/ 10.0

EPSS 概率59.4%百分位 98.1%

漏洞描述

Fortinet FortiOS 5.2.x before 5.2.3 contains a cross-site scripting vulnerability in the SSL VPN login page which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

影响产品

Fortinetfortios查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

www.c2.lolhttps://www.c2.lol/articles/xss-in-fortigates-ssl-vpn-login-page↗www.fortiguard.comhttp://www.fortiguard.com/advisory/FG-IR-15-005/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2015-1880↗www.securitytracker.comhttp://www.securitytracker.com/id/1032261↗www.securitytracker.comhttp://www.securitytracker.com/id/1032262↗

RELATED INTELLIGENCE

同产品关联漏洞

与 fortios 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2024-55591RCE Fortinet Authentication Bypass fortios fortiproxy	严重	9.8	94.3%	PoCEXP	2024/12/09
CVE-2024-42475 Fortinet SSL-VPN - Heap-Based Buffer Overflow fortios	中危	6.5	—	PoCEXP	2024/08/15
CVE-2024-21762 CVE-2024-21762 fortios fortiproxy	严重	9.8	92.7%	PoCEXP	2024/02/09
CVE-2023-27997 CVE-2023-27997 fortios fortiproxy	严重	9.8	90.5%	PoCEXP	2023/06/13
CVE-2022-42475 Fortinet SSL-VPN - Heap-Based Buffer Overflow fortios	严重	9.8	93.1%	PoCEXP	2023/01/02
CVE-2018-13382RCE CVE-2018-13382 fortios fortiproxy	高危	9.1	86.2%	PoCEXP	2019/06/04