CVE-2017-3128: Fortinet FortiOS

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter.

Affected products

• Fortinet FortiOS: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; version 5.0.4 only; version 5.0.5 only; …

Published 2017-05-23. Last modified 2026-06-17.