{"affected":[{"affectedData":[{"product":"Fortinet FortiManager, FortiAnalyzer","vendor":"Fortinet, Inc.","versions":[{"status":"affected","version":"FortiManager 6.0.0, 5.6.5 and below versions"},{"status":"affected","version":"FortiAnalyzer 6.0.0, 5.6.5 and below versions"}]}],"source":"psirt@fortinet.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*","matchCriteriaId":"6A0081B7-6068-4F35-92C0-B51196BC2F6D","versionEndIncluding":"5.6.5","vulnerable":true},{"criteria":"cpe:2.3:a:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C588A627-EBF3-400F-88D6-62D08F9BEB3C","vulnerable":true},{"criteria":"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*","matchCriteriaId":"587A6B16-B611-4A84-A890-03536A2C3E05","versionEndIncluding":"5.6.5","vulnerable":true},{"criteria":"cpe:2.3:a:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B6662CFD-6DAD-4187-AE80-0B7EE99CEB96","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows attacker to inject script code during converting a HTML table to a PDF document under the FortiView feature.  An attacker may be able to social engineer an authenticated user into generating a PDF file containing injected malicious URLs."},{"lang":"es","value":"Una vulnerabilidad de redirección abierta en Fortinet FortiManager en versiones 6.0.0, 5.6.5 y anteriores y en FortiAnalyzer en versiones 6.0.0, 5.6.5 y anteriores permite que un atacante inyecte código de script durante la conversión de una tabla HTML a documento HTML en la característica FortiView. Un atacante podría ser capaz de emplear ingeniería social sobre un usuario autenticado para que genere un archivo PDF que contiene URL maliciosas inyectadas."}],"id":"CVE-2018-1355","lastModified":"2026-06-17T01:51:05.237","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.8,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.8,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2018-1355","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-23T14:00:17.334147Z","version":"2.0.3"}}]},"published":"2018-06-27T20:29:04.933","references":[{"source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/104546"},{"source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041184"},{"source":"psirt@fortinet.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041185"},{"source":"psirt@fortinet.com","tags":["Vendor Advisory"],"url":"https://fortiguard.com/advisory/FG-IR-18-022"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/104546"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041184"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041185"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://fortiguard.com/advisory/FG-IR-18-022"}],"sourceIdentifier":"psirt@fortinet.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-601"}],"source":"nvd@nist.gov","type":"Primary"}]}