{"id":"CVE-2017-7735","state":"PUBLISHED","title":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Gr","description":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups.","publishedAt":"2017-09-12T02:00:00.000Z","updatedAt":"2024-10-25T14:11:52.628Z","severity":null,"assigner":"fortinet","products":["Fortinet, Inc. Fortinet FortiOS"],"affected":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4","status":"affected"}]}],"references":["http://www.securitytracker.com/id/1038705","https://fortiguard.com/advisory/FG-IR-17-127","http://www.securityfocus.com/bid/99098"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:54.997Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/7xxx/CVE-2017-7735.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-7735","state":"PUBLISHED","datePublished":"2017-09-12T02:00:00.000Z","dateUpdated":"2024-10-25T14:11:52.628Z","assignerShortName":"fortinet","assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","dateReserved":"2017-04-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups."}],"affected":[{"vendor":"Fortinet, Inc.","product":"Fortinet FortiOS","versions":[{"version":"FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4","status":"affected"}]}],"references":[{"url":"http://www.securitytracker.com/id/1038705","name":"1038705","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/99098","name":"99098","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"Execute unauthorized code or commands","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"fortinet","dateUpdated":"2017-09-12T09:57:01.000Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8"},"datePublic":"2017-09-11T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@fortinet.com","DATE_PUBLIC":"2017-09-11T00:00:00","ID":"CVE-2017-7735","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Fortinet FortiOS","version":{"version_data":[{"version_value":"FortiOS versions 5.2.0 through 5.2.11, and 5.4.0 through 5.4.4"}]}}]},"vendor_name":"Fortinet, Inc."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Execute unauthorized code or commands"}]}]},"references":{"reference_data":[{"name":"1038705","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038705"},{"name":"https://fortiguard.com/advisory/FG-IR-17-127","refsource":"CONFIRM","url":"https://fortiguard.com/advisory/FG-IR-17-127"},{"name":"99098","refsource":"BID","url":"http://www.securityfocus.com/bid/99098"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.securitytracker.com/id/1038705","name":"1038705","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/99098","name":"99098","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T16:12:28.403Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-23T14:00:37.266792Z","id":"CVE-2017-7735","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-25T14:11:52.628Z"}}]}}}