CVE-2018-9186

A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to…

published May 31, 2018

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.4th percentile
Published
2018-05-31T22:00Z
EPSS history
Timeline
  • 31 MAY 22:00Z
    A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to…
    cvelistv5