CVE-2017-17541

A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.

• CWE-79

• http://www.securitytracker.com/id/1041246Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041247Third Party Advisory, VDB Entry
• https://fortiguard.com/advisory/FG-IR-17-305Vendor Advisory
• http://www.securitytracker.com/id/1041246Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041247Third Party Advisory, VDB Entry
• https://fortiguard.com/advisory/FG-IR-17-305Vendor Advisory

Published

Jul 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17535lib/gui.py in Bob Hepple gjots2 2.4.1 does not validate stri…
• CVE-2017-17536Phabricator before 2017-11-10 does not block the --config an…
• CVE-2017-17537MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthent…
• CVE-2017-17538MikroTik v6.40.5 devices allow remote attackers to cause a d…
• CVE-2017-17539The presence of a hardcoded account in Fortinet FortiWLC 7.0…
• CVE-2017-17540The presence of a hardcoded account in Fortinet FortiWLC 8.3…
• CVE-2017-17542Rejected reason: Not used
• CVE-2017-17543Users' VPN authentication credentials are unsafely encrypted…
• CVE-2017-17544A privilege escalation vulnerability in Fortinet FortiOS 6.0…7.2
• CVE-2017-17545Rejected reason: Not used
• CVE-2017-17546Rejected reason: Not used
• CVE-2017-17547Rejected reason: Not used