Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 8.8
    CVE-2021-26097 An improper neutralization of special elements used in an OS Command vulnerability in FortiSandbox 3.2.0 through 3.2.2, 3.1.0 through 3.1.4…
    Fortinet
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  2. 6.0
    CVE-2021-32596 A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow a…
    Fortinet
  3. 8.8
    CVE-2020-29011 Instances of SQL Injection vulnerabilities in the checksum search and MTA-quarantine modules of FortiSandbox 3.2.0 through 3.2.2, and 3.1.0…
    Fortinet
  4. 6.5
    CVE-2021-36168 A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.5, FortiPortal 5.3.…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  5. 8.1
    CVE-2021-24010 Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 ma…
    Fortinet
  6. 4.3
    CVE-2021-24018 A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacen…
    Fortinet
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  7. 9.9
    CVE-2021-32590 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 throu…
    Fortinet
    EPSS 1.7% chance of exploitation in 30 days, percentile 76%
  8. 5.4
    CVE-2021-32594 An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5…
    Fortinet
  9. 5.3
    CVE-2021-26098 An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few inform…
    Fortinet
  10. 7.5
    CVE-2021-26095 The combination of various cryptographic issues in the session management of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6, includi…
    Fortinet
  11. 6.7
    CVE-2021-24022 A buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and FortiManager CLI 6.4.5 and below, 6.2.7 an…
    Fortinet
  12. 6.3
    CVE-2021-22125 An instance of improper neutralization of special elements in the sniffer module of FortiSandbox before 3.2.2 may allow an authenticated ad…
    Fortinet
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  13. 8.8
    CVE-2021-24013 Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  14. 7.2
    CVE-2021-24015 An improper neutralization of special elements used in an OS Command vulnerability in the administrative interface of FortiMail before 6.4.…
    Fortinet
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  15. 7.1
    CVE-2021-26088 An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO fir…
    Fortinet
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  16. 5.3
    CVE-2021-26090 A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  17. 6.7
    CVE-2021-26089 An improper symlink following in FortiClient for Mac 6.4.3 and below may allow an non-privileged user to execute arbitrary privileged shell…
    Fortinet
  18. 4.4
    CVE-2021-26099 Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possessio…
    Fortinet
  19. 9.8
    CVE-2021-24007 Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticate…
    Fortinet
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  20. 7.8
    CVE-2021-26106 An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 throu…
    Fortinet
  21. 8.8
    CVE-2021-22129 Multiple instances of incorrect calculation of buffer size in the Webmail and Administrative interface of FortiMail before 6.4.5 may allow…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  22. 6.3
    CVE-2020-29014 A concurrent execution using shared resource with improper synchronization ('race condition') in the command shell of FortiSandbox before 3…
    Fortinet
  23. 5.9
    CVE-2021-26100 A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who i…
    Fortinet
  24. 7.5
    CVE-2021-24020 A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 m…
    Fortinet
  25. 4.0
    CVE-2021-24005 Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow…
    Fortinet
  26. 7.8
    CVE-2021-24023 An improper input validation in FortiAI v1.4.0 and earlier may allow an authenticated user to gain system shell access via a malicious payl…
    Fortinet
  27. 6.7
    CVE-2021-22130 A stack-based buffer overflow vulnerability in FortiProxy physical appliance CLI 2.0.0 to 2.0.1, 1.2.0 to 1.2.9, 1.1.0 to 1.1.6, 1.0.0 to 1…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  28. 6.5
    CVE-2021-24012 An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connec…
    Fortinet
  29. 4.3
    CVE-2020-6641 Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow…
    Fortinet
  30. 7.6
    CVE-2021-22123 An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x, 6.0.x, 5.9.x may allow a…
    Fortinet
    EPSS 84.4% chance of exploitation in 30 days, percentile 99.7%