Aller au contenu

Vulnérabilités de Fortinet FortiManager

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-40585 An insertion of sensitive information into log file vulnerabilities [CWE-532] in FortiManager version 7.4.0, version… 5.9 Moyenne 14 mars 2025
CVE-2024-46662 A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager… 8.3 Élevée 14 mars 2025
CVE-2024-33501 Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in… 4.0 Moyenne 11 mars 2025
CVE-2024-32123 Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet… 6.5 Moyenne 11 mars 2025
CVE-2024-40584 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… 6.8 Moyenne 11 févr. 2025
CVE-2024-36508 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet… 5.9 Moyenne 11 févr. 2025
CVE-2024-33504 A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through… 3.9 Faible 11 févr. 2025
CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Moyenne 22 janv. 2025
CVE-2024-50563 A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3,… 6.7 Moyenne 16 janv. 2025
CVE-2024-45331 A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0… 6.9 Moyenne 16 janv. 2025
CVE-2024-32115 A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before… 5.2 Moyenne 14 janv. 2025
CVE-2024-47571 An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an… 7.9 Élevée 14 janv. 2025
CVE-2024-35277 A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager… 8.4 Élevée 14 janv. 2025
CVE-2024-33502 An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager,… 6.4 Moyenne 14 janv. 2025
CVE-2024-33503 A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud… 6.7 Moyenne 14 janv. 2025
CVE-2024-48884 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet… 6.7 Moyenne 14 janv. 2025
CVE-2024-35273 A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2… 7.0 Élevée 14 janv. 2025
CVE-2024-35276 A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through… 5.0 Moyenne 14 janv. 2025
CVE-2024-35275 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version… 6.5 Moyenne 14 janv. 2025
CVE-2024-36512 An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager,… 7.0 Élevée 14 janv. 2025
CVE-2024-50566 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet… 7.2 Élevée 14 janv. 2025
CVE-2021-32589 A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and… 7.7 Élevée 19 déc. 2024
CVE-2024-48889 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78]… 7.2 Élevée 18 déc. 2024
CVE-2024-31496 A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before… 6.3 Moyenne 12 nov. 2024
CVE-2024-35274 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet… 2.2 Faible 12 nov. 2024

Autres produits Fortinet