CVE-2017-3125: fortinet fortimail Cross-site Scripting
Vulnerability summary
CVE-2017-3125 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in fortinet fortimail. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.5% of scored vulnerabilities.
Timeline
- 12-04-2017PublishedVulnerability first disclosed.
- 25-10-2024Last modifiedVulnerability information updated.
Description
An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.11%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.11% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Fortinet1 product
- fortimail5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8 | 5.0 | 5.0.5 | 5.0.6 | 5.0.7 | 5.0.8 | 5.0.9 | 5.0.10 | 5.1 | 5.1.2 | 5.1.3 | 5.1.5 | 5.1.6 | 5.2 | 5.2.1 | 5.2.2 | 5.2.3 | 5.2.4 | 5.2.5 | 5.2.6 | 5.2.7 | 5.2.8 | 5.2.9 | 5.3 | 5.3.1 | 5.3.2 | 5.3.3 | 5.3.4 | 5.3.5 | 5.3.6 | 5.3.7 | 5.3.8
1 vendor · 1 product