Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 6.1
    CVE-2021-36176 Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileg…
    Fortinet
  2. 6.5
    CVE-2021-32595 Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileg…
    Fortinet
  3. 4.1
    CVE-2020-12814 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, v…
    Fortinet
  4. 6.3
    CVE-2021-26107 An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a rest…
    Fortinet
  5. 4.1
    CVE-2020-15940 An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remot…
    Fortinet
  6. 3.5
    CVE-2021-41019 An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connecti…
    Fortinet
  7. 4.3
    CVE-2021-36172 An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow…
    Fortinet
  8. 3.1
    CVE-2021-36181 A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interf…
    Fortinet
  9. 4.3
    CVE-2021-24021 An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below…
    Fortinet
  10. 8.1
    CVE-2021-24019 An insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and below, 6.2.8 and below may allow an attack…
    Fortinet
    EPSS 5.3% chance of exploitation in 30 days, percentile 92%
  11. 4.1
    CVE-2021-36175 An improper neutralization of input vulnerability [CWE-79] in FortiWebManager versions 6.2.3 and below, 6.0.2 and below may allow a remote…
    Fortinet
  12. 5.4
    CVE-2020-15941 A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to…
    Fortinet
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  13. 3.2
    CVE-2021-36170 An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an aut…
    Fortinet
  14. 4.3
    CVE-2021-36178 A insufficiently protected credentials in Fortinet FortiSDNConnector version 1.1.7 and below allows attacker to disclose third-party device…
    Fortinet
  15. 5.4
    CVE-2021-24017 An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and…
    Fortinet
  16. 3.7
    CVE-2021-24016 An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attac…
    Fortinet
  17. 5.6
    CVE-2020-29012 An insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may allow an attacker to reuse the unexpired admi…
    Fortinet
  18. 8.8
    CVE-2021-36182 A Improper neutralization of special elements used in a command ('Command Injection') in Fortinet FortiWeb version 6.3.13 and below allows…
    Fortinet
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  19. 8.0
    CVE-2021-36179 A stack-based buffer overflow in Fortinet FortiWeb version 6.3.14 and below, 6.2.4 and below allows attacker to execute unauthorized code o…
    Fortinet
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  20. 6.3
    CVE-2021-24006 An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user…
    Fortinet
  21. 4.3
    CVE-2020-15939 An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated,…
    Fortinet
  22. 5.8
    CVE-2021-32602 An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below, 5.3.6 and below,…
    Fortinet
  23. 9.8
    CVE-2021-32588 A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions…
    Fortinet
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  24. 4.3
    CVE-2021-32587 An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11 an…
    Fortinet
  25. 4.6
    CVE-2021-32597 Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and b…
    Fortinet
  26. 8.8
    CVE-2021-32603 A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below,…
    Fortinet
  27. 4.3
    CVE-2021-32598 An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GU…
    Fortinet
  28. 7.5
    CVE-2021-22124 An uncontrolled resource consumption (denial of service) vulnerability in the login modules of FortiSandbox 3.2.0 through 3.2.2, 3.1.0 thro…
    Fortinet
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  29. 5.4
    CVE-2021-24014 Multiple instances of improper neutralization of input during web page generation vulnerabilities in FortiSandbox before 4.0.0 may allow an…
    Fortinet
  30. 6.4
    CVE-2021-26096 Multiple instances of heap-based buffer overflow in the command shell of FortiSandbox before 4.0.0 may allow an authenticated attacker to m…
    Fortinet