CVE-2017-3127: A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute...

Security readout for executives and security teams

CVE-2017-3127 is a cross-site scripting issue in Fortinet FortiGate 5.2.0 through 5.2.10. The cited description says an attacker could execute unauthorized code or commands through the srcintf parameter during firewall policy creation. Severity and CVSS are not provided in the bundle, so urgency depends on whether affected FortiGate management surfaces exist. Organizations may be exposed if they still run FortiGate 5.2.0 through 5.2.10 and allow access to firewall policy creation workflows. Exposure is higher where administrative interfaces are broadly reachable or shared among many users. Treat this as a legacy FortiGate hygiene and exposure review item. Without CVSS, KEV, or patch details in the bundle, it is not possible to rate business urgency precisely; affected internet-reachable or widely administered appliances should be prioritized. Mitigation focus: Review Fortinet PSIRT FG-IR-17-017 for supported upgrade or remediation guidance.; Inventory FortiGate appliances and identify any 5.2.0 through 5.2.10 deployments.; Restrict FortiGate management access to authorized administrative networks where operationally possible..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.