Aller au contenu

Vulnérabilités de Fortinet FortiManager

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-33505 A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through… 5.3 Moyenne 12 nov. 2024
CVE-2024-32118 Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities… 6.3 Moyenne 12 nov. 2024
CVE-2024-26011 A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,… 5.2 Moyenne 12 nov. 2024
CVE-2024-32116 Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and… 4.8 Moyenne 12 nov. 2024
CVE-2023-44255 An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2,… 3.9 Faible 12 nov. 2024
CVE-2024-32117 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet… 4.7 Moyenne 12 nov. 2024
CVE-2024-23666 A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0… 7.1 Élevée 12 nov. 2024
CVE-2024-47575 Exploitée Fortinet FortiManager Missing Authentication Vulnerability 9.8 Critique 23 oct. 2024
CVE-2024-33506 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiManager 7.4.2 and below,… 3.1 Faible 8 oct. 2024
CVE-2023-44254 An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before… 4.7 Moyenne 10 sept. 2024
CVE-2024-21757 A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and… 5.5 Moyenne 13 août 2024
CVE-2023-47542 A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and… 6.3 Moyenne 9 avr. 2024
CVE-2023-41842 A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged… 6.3 Moyenne 12 mars 2024
CVE-2023-36554 A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through… 7.7 Élevée 12 mars 2024
CVE-2023-42791 A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and… 8.6 Élevée 20 févr. 2024
CVE-2023-44253 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version… 4.7 Moyenne 15 févr. 2024
CVE-2023-40719 A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3… 4.1 Moyenne 14 nov. 2023
CVE-2023-44256 A server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through… 6.4 Moyenne 20 oct. 2023
CVE-2023-41679 An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0… 7.7 Élevée 10 oct. 2023
CVE-2023-25607 An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in… 7.4 Élevée 10 oct. 2023
CVE-2023-42782 A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below… 5.0 Moyenne 10 oct. 2023
CVE-2023-41838 An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0… 6.9 Moyenne 10 oct. 2023
CVE-2023-42788 An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78]… 7.6 Élevée 10 oct. 2023
CVE-2023-42787 A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and… 6.2 Moyenne 10 oct. 2023
CVE-2023-44249 An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and… 4.1 Moyenne 10 oct. 2023

Autres produits Fortinet