Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 6.3
    CVE-2020-9291 An Insecure Temporary File vulnerability in FortiClient for Windows 6.2.1 and below may allow a local user to gain elevated privileges via…
    Fortinet
  2. 6.5
    CVE-2019-15709 An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unautho…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  3. 9.8
    CVE-2020-9294 An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a…
    Fortinet
    1 public exploit EPSS 81.5% chance of exploitation in 30 days, percentile 99.6%
  4. 6.5
    CVE-2020-9286 An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions su…
    Fortinet
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  5. 5.4
    CVE-2020-6647 An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site…
    Fortinet
  6. 7.5
    CVE-2019-17657 An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiM…
    Fortinet
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  7. 8.8
    CVE-2018-13371 An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the devic…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  8. 5.4
    CVE-2020-6646 An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripti…
    Fortinet
  9. 6.7
    CVE-2019-15708 A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0…
    Fortinet
  10. 8.8
    CVE-2019-17654 An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated…
    Fortinet
  11. 6.1
    CVE-2019-6696 An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to…
    Fortinet
  12. 7.7
    CVE-2020-9287 A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
    Fortinet
  13. 7.3
    CVE-2020-9290 A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
    Fortinet
  14. 5.4
    CVE-2019-6699 An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may allow an attacker to execute a stored Cross Si…
    Fortinet
  15. 6.5
    CVE-2019-16157 An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive informat…
    Fortinet
  16. 8.8
    CVE-2019-17653 A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated a…
    Fortinet
  17. 9.8
    CVE-2019-17658 An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to g…
    Fortinet
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  18. 5.4
    CVE-2020-6643 An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authentica…
    Fortinet
  19. 6.1
    CVE-2019-16156 An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may…
    Fortinet
  20. 7.1
    CVE-2019-16155 A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files…
    Fortinet
  21. 6.5
    CVE-2019-16152 A Denial of service (DoS) vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient…
    Fortinet
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  22. 6.5
    CVE-2019-17652 A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient pro…
    Fortinet
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  23. 7.8
    CVE-2019-15711 A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands u…
    Fortinet
  24. 9.8
    CVE-2015-3613 A vulnerability exists in in FortiManager 5.2.1 and earlier and 5.0.10 and earlier in the WebUI FTP backup page
    Fortinet
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  25. 5.4
    CVE-2015-3612 A Cross-site Scripting (XSS) vulnerability exists in FortiManager 5.2.1 and earlier and 5.0.10 and earlier via an unspecified parameter in…
    Fortinet
  26. 8.8
    CVE-2015-3611 A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspecified vectors, whi…
    Fortinet
    EPSS 5.6% chance of exploitation in 30 days, percentile 93%
  27. 5.4
    CVE-2019-17651 An Improper Neutralization of Input vulnerability in the description and title parameters of a Device Maintenance Schedule in FortiSIEM ver…
    Fortinet
  28. 4.9
    CVE-2019-15707 An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perfo…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  29. 7.2
    CVE-2019-15712 An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to acces…
    Fortinet
  30. 5.5
    CVE-2019-5593 Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private key…
    Fortinet