{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-10T08:02:10.943","vulnerabilities":[{"cve":{"id":"CVE-2017-7335","sourceIdentifier":"psirt@fortinet.com","published":"2017-10-26T13:29:00.277","lastModified":"2026-05-13T00:24:29.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters \"refresh\" and \"branchtotable\" present in HTTP POST requests."},{"lang":"es","value":"Una vulnerabilidad de Cross-Site Scripting (XSS) en Fortinet FortiWLC en versiones 6.1-x (6.1-2, 6.1-4 y 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); y 8.x (8.0, 8.1, 8.2 y 8.3.0-8.3.2) permite que un usuario autenticado inyecte scripts web o HTML arbitrarios mediante parámetros \"refresh\" y \"branchtotable\" no sanitizados presentes en peticiones HTTP POST."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:6.1-2:*:*:*:*:*:*:*","matchCriteriaId":"D87F7FFB-1E43-4CEE-8F5C-85A6F87AF447"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:6.1-4:*:*:*:*:*:*:*","matchCriteriaId":"87D90FE1-EDA4-40F6-ADB0-969CAB8645F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:6.1-5:*:*:*:*:*:*:*","matchCriteriaId":"347BFB74-E014-4C31-B292-08BC6B96B2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-7:*:*:*:*:*:*:*","matchCriteriaId":"5C562DA6-693C-4C16-A69A-17293C010D16"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-8:*:*:*:*:*:*:*","matchCriteriaId":"5005218E-1CE5-49D9-BBF8-07DC6BDE1E03"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-9:*:*:*:*:*:*:*","matchCriteriaId":"224292C5-AA1F-4ECE-A89A-08DD0BD5CDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:7.0-10:*:*:*:*:*:*:*","matchCriteriaId":"743234D6-C2B9-4980-969D-C6811142CAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7E03C8D2-C2DC-42FA-BB60-AAE542646B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.1:*:*:*:*:*:*:*","matchCriteriaId":"0CBAC292-6C47-41BC-92A0-2038280D3FB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.2:*:*:*:*:*:*:*","matchCriteriaId":"CE5B0F43-DFFF-4603-AAB3-742F9E9F7ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.0:*:*:*:*:*:*:*","matchCriteriaId":"138354E5-2281-422B-95D9-879D900DFF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.1:*:*:*:*:*:*:*","matchCriteriaId":"6300548E-1D1B-4F9D-9894-0C4D2906E2A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fortinet:fortiwlc:8.3.2:*:*:*:*:*:*:*","matchCriteriaId":"28C337BE-93A1-4AC4-87D3-4F620A05AF1B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101287","source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-106","source":"psirt@fortinet.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://fortiguard.com/psirt/FG-IR-17-106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}