Fortinet

Fortianalyzer

83 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
Warnung Medienbericht
  • EPSS 3.71%
  • Veröffentlicht 27.01.2026 19:18:23
  • Zuletzt bearbeitet 29.01.2026 13:16:51

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15...

  • EPSS 0.01%
  • Veröffentlicht 11.12.2025 14:10:08
  • Zuletzt bearbeitet 12.12.2025 18:28:55

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5...

  • EPSS 0.12%
  • Veröffentlicht 14.10.2025 15:23:42
  • Zuletzt bearbeitet 15.10.2025 17:19:50

An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of serv...

  • EPSS 0.04%
  • Veröffentlicht 14.10.2025 15:23:03
  • Zuletzt bearbeitet 22.10.2025 16:31:59

A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacke...

  • EPSS 0.09%
  • Veröffentlicht 14.10.2025 15:23:00
  • Zuletzt bearbeitet 27.01.2026 20:16:13

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all ...

Medienbericht
  • EPSS 0.03%
  • Veröffentlicht 08.07.2025 14:41:34
  • Zuletzt bearbeitet 22.07.2025 18:11:02

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiManager Cloud 7.4.1 th...

Medienbericht
  • EPSS 0.18%
  • Veröffentlicht 08.04.2025 14:15:32
  • Zuletzt bearbeitet 23.07.2025 16:02:05

An Improper Output Neutralization for Logs vulnerability [CWE-117] in FortiAnalyzer version 7.6.1 and below, version 7.4.5 and below, version 7.2.8 and below, version 7.0.13 and below and FortiManager version 7.6.1 and below, version 7.4.5 and below,...

Medienbericht
  • EPSS 0.14%
  • Veröffentlicht 08.04.2025 14:15:31
  • Zuletzt bearbeitet 25.07.2025 15:22:38

A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiPro...

Medienbericht
  • EPSS 0.15%
  • Veröffentlicht 08.04.2025 14:15:30
  • Zuletzt bearbeitet 25.07.2025 15:22:20

A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy vers...

Warnung
  • EPSS 25.03%
  • Veröffentlicht 24.03.2025 15:39:48
  • Zuletzt bearbeitet 24.07.2025 19:56:34

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 t...