Vulnerability Database

316,080

Total vulnerabilities in the database

CVE-2017-3131

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.

Published: Sep 12, 2017
Updated: Nov 9, 2025
CVE: CVE-2017-3131
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
fortinet / fortios	5.6.0	5.6.0.x
fortinet / fortios	5.4.3	5.4.3.x
fortinet / fortios	5.4.0	5.4.0.x
fortinet / fortios	5.4.1	5.4.1.x
fortinet / fortios	5.4.2	5.4.2.x
fortinet / fortios	5.4.4	5.4.4.x

http://www.securityfocus.com/bid/100009
http://www.securitytracker.com/id/1039020
https://fortiguard.com/advisory/FG-IR-17-104
https://www.exploit-db.com/exploits/42388/

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo