Summary
generated automatically from NVD dataCVE-2013-7181 is a cross-site scripting (CWE-79) flaw in the user/ldap_user/add component of Fortinet FortiOS 5.0.3. The filter parameter is not properly handled, so a remote attacker could inject arbitrary web script or HTML. The NVD data lists the affected product as fortinet fortiweb with 5.0.3 as the bound. It is rated 4.3 (MEDIUM) under CVSS v2.0, with a network attack vector, medium complexity, and a limited integrity impact.
NVD description
Cross-site scripting (XSS) vulnerability in user/ldap_user/add in Fortinet FortiOS 5.0.3 allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
EPSS · FIRST.org
2.4%probability of exploitation in the next 30 days
Higher than 83% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 4 févr. 2014
- Updated
- 17 juin 2026
- Status
- Modified
- Source
- cret@cert.org
Affected products
Weaknesses (CWE)
References (14)
- http://www.kb.cert.org/vuls/id/593118US Government Resource
- http://www.kb.cert.org/vuls/id/593118US Government Resource
Similar CVEs
Other vulnerabilities of type CWE-79
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.