Fortinet

Fortimanager

98 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2024-36512

  • EPSS 0.19%
  • Published 14.01.2025 14:15:30
  • Last modified 31.01.2025 16:32:26

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauth...

7.5

CVE-2024-35277

  • EPSS 0.04%
  • Published 14.01.2025 14:15:30
  • Last modified 31.01.2025 17:08:01

A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configurat...

8.8

CVE-2024-35275

  • EPSS 0.1%
  • Published 14.01.2025 14:15:29
  • Last modified 31.01.2025 16:49:57

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted ht...

5.5

CVE-2024-32115

  • EPSS 0.26%
  • Published 14.01.2025 14:15:29
  • Last modified 19.03.2025 15:46:05

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.

7.2

CVE-2024-33502

  • EPSS 0.21%
  • Published 14.01.2025 14:15:29
  • Last modified 21.01.2025 21:03:02

An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 ...

7.8

CVE-2024-33503

  • EPSS 0.02%
  • Published 14.01.2025 14:15:29
  • Last modified 31.01.2025 17:36:27

A improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through...

8.8

CVE-2024-35273

  • EPSS 0.08%
  • Published 14.01.2025 14:15:29
  • Last modified 31.01.2025 17:38:10

A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

9.8

CVE-2024-35276

  • EPSS 0.06%
  • Published 14.01.2025 14:15:29
  • Last modified 31.01.2025 17:04:42

A stack-based buffer overflow in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through...

9.8

CVE-2021-32589

  • EPSS 7.88%
  • Published 19.12.2024 13:15:05
  • Last modified 31.01.2025 17:42:05

A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below ...

7.2

CVE-2024-48889

  • EPSS 0.71%
  • Published 18.12.2024 13:15:06
  • Last modified 27.08.2025 22:15:46

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below a...