Vulnerability Database

311,379

Total vulnerabilities in the database

CVE-2018-9186

A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header.

  • Published: May 31, 2018
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-9186
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortiauthenticator 4.0.0 5.3.0