| CVE-2024-33505 |
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through…
|
5.3
Medium
|
Nov 12, 2024 |
| CVE-2024-32118 |
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities…
|
6.3
Medium
|
Nov 12, 2024 |
| CVE-2024-26011 |
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,…
|
5.2
Medium
|
Nov 12, 2024 |
| CVE-2024-32116 |
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and…
|
4.8
Medium
|
Nov 12, 2024 |
| CVE-2023-44255 |
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2,…
|
3.9
Low
|
Nov 12, 2024 |
| CVE-2024-32117 |
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet…
|
4.7
Medium
|
Nov 12, 2024 |
| CVE-2024-23666 |
A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0…
|
7.1
High
|
Nov 12, 2024 |
| CVE-2024-47575 |
Exploited
Fortinet FortiManager Missing Authentication Vulnerability
|
9.8
Critical
|
Oct 23, 2024 |
| CVE-2024-33506 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below,…
|
3.1
Low
|
Oct 8, 2024 |
| CVE-2023-44254 |
An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before…
|
4.7
Medium
|
Sep 10, 2024 |
| CVE-2024-21757 |
A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and…
|
5.5
Medium
|
Aug 13, 2024 |
| CVE-2023-47542 |
A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and…
|
6.3
Medium
|
Apr 9, 2024 |
| CVE-2023-41842 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged…
|
6.3
Medium
|
Mar 12, 2024 |
| CVE-2023-36554 |
A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through…
|
7.7
High
|
Mar 12, 2024 |
| CVE-2023-42791 |
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and…
|
8.6
High
|
Feb 20, 2024 |
| CVE-2023-44253 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version…
|
4.7
Medium
|
Feb 15, 2024 |
| CVE-2023-40719 |
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3…
|
4.1
Medium
|
Nov 14, 2023 |
| CVE-2023-44256 |
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through…
|
6.4
Medium
|
Oct 20, 2023 |
| CVE-2023-41679 |
An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0…
|
7.7
High
|
Oct 10, 2023 |
| CVE-2023-25607 |
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in…
|
7.4
High
|
Oct 10, 2023 |
| CVE-2023-42782 |
A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below…
|
5.0
Medium
|
Oct 10, 2023 |
| CVE-2023-41838 |
An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0…
|
6.9
Medium
|
Oct 10, 2023 |
| CVE-2023-42788 |
An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78]…
|
7.6
High
|
Oct 10, 2023 |
| CVE-2023-42787 |
A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and…
|
6.2
Medium
|
Oct 10, 2023 |
| CVE-2023-44249 |
An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and…
|
4.1
Medium
|
Oct 10, 2023 |