Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 4.1
    CVE-2021-36191 A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use…
    Fortinet
  2. 7.3
    CVE-2021-41027 A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code o…
    Fortinet
  3. 6.1
    CVE-2021-41015 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15…
    Fortinet
  4. 4.3
    CVE-2021-43064 A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6…
    Fortinet
  5. 8.1
    CVE-2021-26109 An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated atta…
    Fortinet
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  6. 7.5
    CVE-2021-26108 A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reve…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  7. 7.5
    CVE-2021-41024 A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthentica…
    Fortinet
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  8. 6.3
    CVE-2021-26103 An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.…
    Fortinet
  9. 5.3
    CVE-2021-32591 A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1,…
    Fortinet
  10. 5.4
    CVE-2021-42752 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows…
    Fortinet
  11. 8.8
    CVE-2021-42760 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows…
    Fortinet
  12. 6.4
    CVE-2021-41029 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows…
    Fortinet
  13. 8.3
    CVE-2021-43067 A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  14. 6.7
    CVE-2021-42757 A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated…
    Fortinet
  15. 8.8
    CVE-2021-42758 An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low priv…
    Fortinet
    EPSS 2.0% chance of exploitation in 30 days, percentile 81%
  16. 8.1
    CVE-2021-36180 Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and…
    Fortinet
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  17. 7.8
    CVE-2021-26110 An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and Fo…
    Fortinet
  18. 7.8
    CVE-2021-32592 An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6…
    Fortinet
  19. 5.0
    CVE-2021-32600 An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9,…
    Fortinet
  20. 5.2
    CVE-2021-36192 An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2…
    Fortinet
  21. 4.3
    CVE-2020-15935 A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated…
    Fortinet
  22. 3.2
    CVE-2021-42754 An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow…
    Fortinet
  23. 8.8
    CVE-2021-36184 A improper neutralization of Special Elements used in an SQL Command ('SQL Injection') in Fortinet FortiWLM version 8.6.1 and below allows…
    Fortinet
  24. 8.8
    CVE-2021-36185 A improper neutralization of special elements used in an OS command ('OS Command Injection') in Fortinet FortiWLM version 8.6.1 and below a…
    Fortinet
    EPSS 1.9% chance of exploitation in 30 days, percentile 79%
  25. 7.4
    CVE-2021-36183 An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local…
    Fortinet
  26. 8.8
    CVE-2021-36186 A stack-based buffer overflow in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to execute unau…
    Fortinet
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  27. 5.3
    CVE-2021-36187 A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.0, version 6.3.15 and below, 6.2.5 and below allows attacker to cause…
    Fortinet
    EPSS 1.4% chance of exploitation in 30 days, percentile 73%
  28. 5.5
    CVE-2021-41023 A unprotected storage of credentials in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows an authenticated user to disclosure…
    Fortinet
  29. 7.8
    CVE-2021-41022 A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or c…
    Fortinet
  30. 4.3
    CVE-2021-36174 A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an a…
    Fortinet