CVE-2017-7335

Name: CVE-2017-7335
Creator: NVD / NIST
Published: 2017-10-26T13:29:00.277+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.54%

Last modified Jun 17, 2026

CVE-2017-7335 is a vulnerability of currently unknown severity. A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters "refresh" and "branchtotable" present in HTTP POST requests.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.

Description

A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.1, 8.2 and 8.3.0-8.3.2) allows an authenticated user to inject arbitrary web script or HTML via non-sanitized parameters "refresh" and "branchtotable" present in HTTP POST requests.

Metrics

EPSS Probability

0.54%

41.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Fortinet	Fortiwlc	6.1-2
Fortinet	Fortiwlc	6.1-4
Fortinet	Fortiwlc	6.1-5
Fortinet	Fortiwlc	7.0-7
Fortinet	Fortiwlc	7.0-8
Fortinet	Fortiwlc	7.0-9
Fortinet	Fortiwlc	7.0-10
Fortinet	Fortiwlc	8.0
Fortinet	Fortiwlc	8.1
Fortinet	Fortiwlc	8.2
Fortinet	Fortiwlc	8.3.0
Fortinet	Fortiwlc	8.3.1
Fortinet	Fortiwlc	8.3.2

References

http://www.securityfocus.com/bid/101287Third Party Advisory, VDB Entry
https://fortiguard.com/psirt/FG-IR-17-106Vendor Advisory
http://www.securityfocus.com/bid/101287Third Party Advisory, VDB Entry
https://fortiguard.com/psirt/FG-IR-17-106Vendor Advisory

Timeline

Published: Oct 26, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-7335?

How severe is CVE-2017-7335?

Severity scoring for CVE-2017-7335 is pending analysis. The EPSS model estimates a 0.54% probability of exploitation in the next 30 days.

How do I fix CVE-2017-7335?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-7335?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST