Fortinet

Fortimanager

100 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.7

CVE-2021-43072

  • EPSS 0.05%
  • Veröffentlicht 18.07.2023 03:15:54
  • Zuletzt bearbeitet 21.11.2024 06:28:38

A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiAnalyzer version 7.0.2 and below, version 6.4.7 and below, version 6.2.9 and below, version 6.0.11 and below, version 5.6.11 and below, FortiManager version 7.0...

6.5

CVE-2023-25606

  • EPSS 0.21%
  • Veröffentlicht 11.07.2023 17:15:12
  • Zuletzt bearbeitet 21.11.2024 07:49:49

An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4  all versions may allow a remote and authent...

6.5

CVE-2023-25609

  • EPSS 0.16%
  • Veröffentlicht 13.06.2023 09:15:16
  • Zuletzt bearbeitet 21.11.2024 07:49:49

A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services ...

8.1

CVE-2023-22642

  • EPSS 0.09%
  • Veröffentlicht 11.04.2023 17:15:08
  • Zuletzt bearbeitet 21.11.2024 07:45:06

An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the c...

6.5

CVE-2022-27490

  • EPSS 0.25%
  • Veröffentlicht 07.03.2023 17:15:11
  • Zuletzt bearbeitet 21.11.2024 06:55:49

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4....

7.5

CVE-2022-45857

  • EPSS 0.19%
  • Veröffentlicht 05.01.2023 08:15:08
  • Zuletzt bearbeitet 21.11.2024 07:29:50

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.

2.7

CVE-2022-38377

  • EPSS 0.16%
  • Veröffentlicht 25.11.2022 16:15:10
  • Zuletzt bearbeitet 21.11.2024 07:16:21

An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0...

5.4

CVE-2022-39950

  • EPSS 0.73%
  • Veröffentlicht 02.11.2022 12:15:55
  • Zuletzt bearbeitet 21.11.2024 07:18:32

An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAnalyzer 6.0.0 all versions, 6.2.0 all versions, 6.4.0 through 6.4.8, and 7.0.0 through 7.0.4. Report templates may allow a low priv...

5.3

CVE-2022-26121

  • EPSS 0.3%
  • Veröffentlicht 10.10.2022 14:15:09
  • Zuletzt bearbeitet 21.11.2024 06:53:28

An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote at...

7.2

CVE-2022-27483

  • EPSS 5.37%
  • Veröffentlicht 19.07.2022 14:15:08
  • Zuletzt bearbeitet 21.11.2024 06:55:48

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 throu...