{"id":"CVE-2017-7735","aliases":["EUVD-2017-16710","GHSA-cj2m-xh7j-q94r"],"status":"published","title":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0...","description":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups.","severity":{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00787,"percentile":0.56414,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2017-09-12T02:00:00Z","modified":"2026-06-17T01:25:04Z","products":[{"vendor":"fortinet","product":"fortinet fortios"},{"vendor":"fortinet","product":"fortios"},{"vendor":"fortinet, inc.","product":"fortinet fortios"}],"references":[{"url":"http://www.securitytracker.com/id/1038705","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/advisory/FG-IR-17-127","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/99098","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7735"},{"url":"https://github.com/advisories/GHSA-cj2m-xh7j-q94r"}],"sources":{"cve":[{"id":"CVE-2017-7735","description":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups.","status":"published","published":"2017-09-12T02:00:00Z","modified":"2024-10-25T14:11:52.628Z","updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16710","description":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups.","status":"published","published":"2017-09-12T02:00:00Z","modified":"2024-10-25T14:11:52Z","updated_at":"2026-11-03T00:05:18.633679Z"}],"ghsa":[{"id":"GHSA-cj2m-xh7j-q94r","title":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0...","description":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups.","status":"published","published":"2022-05-17T01:06:28Z","modified":"2023-02-03T05:03:20Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:53:20.146851Z"}],"nvd":[{"id":"CVE-2017-7735","description":"A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the \"Groups\" input while creating or editing User Groups.","status":"published","published":"2017-09-12T02:29:00.42Z","modified":"2026-06-17T01:25:04.073Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:03:58.85945Z"}]}}