Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2021-43206 A server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.x, 6.0.…
    Fortinet
  2. 7.5
    CVE-2022-23443 An improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to access gateway API data via crafted HTTP…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  3. 6.3
    CVE-2021-41032 An improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attac…
    Fortinet
  4. 8.8
    CVE-2021-41020 An improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may allow an authenticated, non privileged att…
    Fortinet
  5. 6.2
    CVE-2021-26113 A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously c…
    Fortinet
  6. 6.7
    CVE-2021-26116 An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator be…
    Fortinet
  7. 7.2
    CVE-2021-32585 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to per…
    Fortinet
  8. 7.1
    CVE-2021-22127 An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow…
    Fortinet
  9. 6.5
    CVE-2021-41026 A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbit…
    Fortinet
  10. 7.8
    CVE-2021-26104 Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and a…
    Fortinet
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  11. 8.2
    CVE-2021-44169 A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, ver…
    Fortinet
  12. 7.8
    CVE-2022-23440 A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5…
    Fortinet
  13. 4.3
    CVE-2021-43205 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Linux version 7.0.2 and below, 6.4…
    Fortinet
  14. 6.5
    CVE-2021-32593 A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allo…
    Fortinet
  15. 7.2
    CVE-2021-24009 Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9…
    Fortinet
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  16. 9.8
    CVE-2021-26114 Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthent…
    Fortinet
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  17. 8.1
    CVE-2021-26112 Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN befo…
    Fortinet
    EPSS 1.7% chance of exploitation in 30 days, percentile 78%
  18. 9.1
    CVE-2022-23441 A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated…
    Fortinet
  19. 5.4
    CVE-2020-29013 An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to sil…
    Fortinet
  20. 4.4
    CVE-2022-23446 A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole appl…
    Fortinet
  21. 5.4
    CVE-2021-43070 Multiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and belo…
    Fortinet
  22. 4.1
    CVE-2021-44166 An improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a r…
    Fortinet
  23. 7.8
    CVE-2022-22301 An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 through 5.4.3, 5.2.0…
    Fortinet
  24. 2.8
    CVE-2022-22303 An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0…
    Fortinet
  25. 8.8
    CVE-2021-43077 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.2 and below, versio…
    Fortinet
  26. 2.6
    CVE-2020-15936 A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.1…
    Fortinet
  27. 4.3
    CVE-2022-22300 A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version…
    Fortinet
  28. 8.8
    CVE-2021-43075 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.2 and below,…
    Fortinet
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  29. 7.7
    CVE-2021-32586 An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 64%
  30. 9.8
    CVE-2021-36166 An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative acco…
    Fortinet
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%