Fortinet

Fortianalyzer

78 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.1

CVE-2023-23776

  • EPSS 0.06%
  • Published 07.03.2023 17:15:12
  • Last modified 21.11.2024 07:46:48

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine pa...

6.5

CVE-2022-27490

  • EPSS 0.2%
  • Published 07.03.2023 17:15:11
  • Last modified 21.11.2024 06:55:49

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4....

6.1

CVE-2022-30304

  • EPSS 0.22%
  • Published 16.02.2023 19:15:12
  • Last modified 21.11.2024 07:02:32

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow a remote unauthenticated attacker to perform a stored cross site scripting (XSS) attack via the ...

2.7

CVE-2022-38377

  • EPSS 0.13%
  • Published 25.11.2022 16:15:10
  • Last modified 21.11.2024 07:16:21

An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0...

5.4

CVE-2022-39950

  • EPSS 0.62%
  • Published 02.11.2022 12:15:55
  • Last modified 21.11.2024 07:18:32

An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAnalyzer 6.0.0 all versions, 6.2.0 all versions, 6.4.0 through 6.4.8, and 7.0.0 through 7.0.4. Report templates may allow a low priv...

5.3

CVE-2022-26121

  • EPSS 0.21%
  • Published 10.10.2022 14:15:09
  • Last modified 21.11.2024 06:53:28

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote at...

7.2

CVE-2022-27483

  • EPSS 5.37%
  • Published 19.07.2022 14:15:08
  • Last modified 21.11.2024 06:55:48

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 throu...

6.7

CVE-2022-26118

  • EPSS 0.11%
  • Published 18.07.2022 18:15:09
  • Last modified 21.11.2024 06:53:28

A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and authenticated attacker with a restricted shell to escalate their privileges to root due to inc...

7.8

CVE-2021-26104

Exploit
  • EPSS 0.79%
  • Published 06.04.2022 16:15:07
  • Last modified 21.11.2024 05:55:52

Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x...

8.8

CVE-2022-22300

  • EPSS 0.14%
  • Published 01.03.2022 19:15:08
  • Last modified 21.11.2024 06:46:35

A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, Fo...