| CVE-2023-44253 |
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version…
|
4.7
Moyenne
|
15 févr. 2024 |
| CVE-2023-40719 |
A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3…
|
4.1
Moyenne
|
14 nov. 2023 |
| CVE-2023-44256 |
A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through…
|
6.4
Moyenne
|
20 oct. 2023 |
| CVE-2023-25607 |
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in…
|
7.4
Élevée
|
10 oct. 2023 |
| CVE-2023-42782 |
A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below…
|
5.0
Moyenne
|
10 oct. 2023 |
| CVE-2023-41838 |
An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0…
|
6.9
Moyenne
|
10 oct. 2023 |
| CVE-2023-42788 |
An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78]…
|
7.6
Élevée
|
10 oct. 2023 |
| CVE-2023-42787 |
A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and…
|
6.2
Moyenne
|
10 oct. 2023 |
| CVE-2023-44249 |
An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and…
|
4.1
Moyenne
|
10 oct. 2023 |
| CVE-2023-36638 |
An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0…
|
4.2
Moyenne
|
13 sept. 2023 |
| CVE-2022-22305 |
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below;…
|
5.4
Moyenne
|
1 sept. 2023 |
| CVE-2021-43072 |
A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and…
|
6.3
Moyenne
|
18 juil. 2023 |
| CVE-2023-25606 |
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in…
|
6.2
Moyenne
|
11 juil. 2023 |
| CVE-2023-25609 |
A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through…
|
4.2
Moyenne
|
13 juin 2023 |
| CVE-2023-22642 |
An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1,…
|
6.8
Moyenne
|
11 avr. 2023 |
| CVE-2022-42477 |
An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below,…
|
6.5
Moyenne
|
11 avr. 2023 |
| CVE-2022-27490 |
A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4,…
|
5.1
Moyenne
|
7 mars 2023 |
| CVE-2023-23776 |
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0…
|
4.6
Moyenne
|
7 mars 2023 |
| CVE-2023-25611 |
A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0…
|
4.0
Moyenne
|
7 mars 2023 |
| CVE-2022-30304 |
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to…
|
4.2
Moyenne
|
16 févr. 2023 |
| CVE-2022-38377 |
An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7,…
|
4.1
Moyenne
|
25 nov. 2022 |
| CVE-2021-42757 |
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may…
|
6.3
Moyenne
|
8 déc. 2021 |
| CVE-2020-12811 |
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow…
|
4.9
Moyenne
|
24 sept. 2020 |
| CVE-2018-13375 |
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager…
|
Non notée
|
28 mai 2019 |