7.2
Élevée
CVE-2024-27783 Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow…
Description
Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FortiAIOps | 2.0.0 | Pas de correctif indiqué |
Autres CVE de FortiAIOps
Les 4 CVE de FortiAIOps →
CVE-2024-27782
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an…
7.7
Élevée
CVE-2024-27784
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet…
8.3
Élevée
CVE-2024-27785
An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may…
5.1
Moyenne