CVE-2017-14182

A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresponsive, via passing a specially crafted payload to the 'params' parameter of the JSON web API.

• CWE-20

• http://code610.blogspot.com/2017/10/patch-your-fortinet-cve-2017-14182.htmlThird Party Advisory
• http://www.securityfocus.com/bid/101559Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039678Third Party Advisory, VDB Entry
• https://fortiguard.com/psirt/FG-IR-17-206Vendor Advisory
• http://code610.blogspot.com/2017/10/patch-your-fortinet-cve-2017-14182.htmlThird Party Advisory
• http://www.securityfocus.com/bid/101559Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039678Third Party Advisory, VDB Entry
• https://fortiguard.com/psirt/FG-IR-17-206Vendor Advisory

Published

Oct 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14177Apport through 2.20.7 does not properly handle core dumps fr…
• CVE-2017-14178In snapd 2.27 through 2.29.2 the 'snap logs' command could b…
• CVE-2017-14179Apport before 2.13 does not properly handle crashes originat…
• CVE-2017-1418IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.…4
• CVE-2017-14180Apport 2.13 through 2.20.7 does not properly handle crashes …
• CVE-2017-14181DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplus…
• CVE-2017-14184An Information Disclosure vulnerability in Fortinet FortiCli…
• CVE-2017-14185An Information Disclosure vulnerability in Fortinet FortiOS …
• CVE-2017-14186A Cross-site Scripting (XSS) vulnerability in Fortinet Forti…
• CVE-2017-14187A local privilege escalation and local code execution vulner…
• CVE-2017-14189An improper access control vulnerability in Fortinet FortiWe…
• CVE-2017-14190A Cross-site Scripting vulnerability in Fortinet FortiOS 5.6…