Fortinet

Fortimanager

98 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-44249

  • EPSS 0.2%
  • Published 10.10.2023 17:15:13
  • Last modified 21.11.2024 08:25:31

An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive inform...

6.7

CVE-2023-42788

Exploit
  • EPSS 0.25%
  • Published 10.10.2023 17:15:12
  • Last modified 21.11.2024 08:23:09

An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12...

6.5

CVE-2023-42787

Exploit
  • EPSS 0.75%
  • Published 10.10.2023 17:15:12
  • Last modified 21.11.2024 08:23:09

A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged ...

7.1

CVE-2023-41838

  • EPSS 0.23%
  • Published 10.10.2023 17:15:12
  • Last modified 21.11.2024 08:21:46

An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli.

9.6

CVE-2023-41679

  • EPSS 0.19%
  • Published 10.10.2023 17:15:12
  • Last modified 21.11.2024 08:21:28

An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "de...

7.8

CVE-2023-25607

  • EPSS 0.15%
  • Published 10.10.2023 17:15:11
  • Last modified 21.11.2024 07:49:49

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions, FortiAnalyzer 7....

4.3

CVE-2023-36638

  • EPSS 0.13%
  • Published 13.09.2023 13:15:09
  • Last modified 21.11.2024 08:10:08

An improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions and FortiAnalyzer 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4....

4.2

CVE-2022-22305

  • EPSS 0.07%
  • Published 01.09.2023 12:15:08
  • Last modified 21.11.2024 06:46:36

An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and...

6.7

CVE-2021-43072

  • EPSS 0.05%
  • Published 18.07.2023 03:15:54
  • Last modified 21.11.2024 06:28:38

A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0...

6.5

CVE-2023-25606

  • EPSS 0.21%
  • Published 11.07.2023 17:15:12
  • Last modified 21.11.2024 07:49:49

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authent...