Fortinet

Fortianalyzer Big Data

12 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.7

CVE-2024-33501

  • EPSS 0.03%
  • Published 11.03.2025 14:54:41
  • Last modified 24.07.2025 19:05:16

Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fort...

6.7

CVE-2024-32123

  • EPSS 0.04%
  • Published 11.03.2025 14:54:38
  • Last modified 24.07.2025 19:05:03

Multiple improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 ...

7.2

CVE-2024-40584

  • EPSS 0.14%
  • Published 11.02.2025 17:15:22
  • Last modified 22.07.2025 21:37:17

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 thro...

4.9

CVE-2024-32117

  • EPSS 0.36%
  • Published 12.11.2024 19:15:09
  • Last modified 21.01.2025 22:19:39

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-B...

6.7

CVE-2024-32118

  • EPSS 0.3%
  • Published 12.11.2024 19:15:09
  • Last modified 17.01.2025 20:42:17

Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and...

2.3

CVE-2024-35274

  • EPSS 0.04%
  • Published 12.11.2024 19:15:09
  • Last modified 17.01.2025 20:29:43

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and b...

6.7

CVE-2024-31496

  • EPSS 0.04%
  • Published 12.11.2024 19:15:08
  • Last modified 21.01.2025 22:11:48

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileg...

6

CVE-2024-32116

  • EPSS 0.12%
  • Published 12.11.2024 19:15:08
  • Last modified 21.01.2025 22:19:07

Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allow...

8.8

CVE-2024-23666

  • EPSS 8.31%
  • Published 12.11.2024 19:15:07
  • Last modified 21.01.2025 22:04:37

A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through...

4.1

CVE-2023-44255

  • EPSS 0.16%
  • Published 12.11.2024 19:15:06
  • Last modified 21.01.2025 22:02:45

An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to r...