Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 9.1
    CVE-2022-38375 An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticat…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  2. 4.9
    CVE-2023-23778 A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions…
    Fortinet
  3. 6.8
    CVE-2023-23779 Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb ve…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  4. 6.6
    CVE-2022-30306 A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, v…
    Fortinet
  5. 6.6
    CVE-2022-33871 A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier m…
    Fortinet
  6. 6.4
    CVE-2023-23781 A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML…
    Fortinet
  7. 7.8
    CVE-2023-23782 A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all vers…
    Fortinet
  8. 6.7
    CVE-2023-23783 A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to…
    Fortinet
  9. 5.7
    CVE-2023-23784 A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all version…
    Fortinet
  10. 8.0
    CVE-2023-23780 A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet Fo…
    Fortinet
  11. 7.8
    CVE-2023-25602 A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earl…
    Fortinet
  12. 9.8
    CVE-2021-42756 Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and…
    Fortinet
    EPSS 35.2% chance of exploitation in 30 days, percentile 98%
  13. 9.0
    CVE-2021-42761 A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6.3…
    Fortinet
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  14. 5.3
    CVE-2022-30299 A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions, 6.2 all version…
    Fortinet
  15. 4.3
    CVE-2021-43074 An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all version…
    Fortinet
  16. 6.5
    CVE-2022-30300 A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authe…
    Fortinet
  17. 8.8
    CVE-2022-30303 An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0 through 7.0.1, 6.3…
    Fortinet
    EPSS 2.5% chance of exploitation in 30 days, percentile 85%
  18. 4.3
    CVE-2022-43954 An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0.0 through 7.0.2 may…
    Fortinet
  19. 8.8
    CVE-2022-41335 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, Fo…
    Fortinet
  20. 6.5
    CVE-2022-45857 An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attac…
    Fortinet
  21. 8.8
    CVE-2022-39947 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0…
    Fortinet
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  22. 5.4
    CVE-2022-42471 An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In FortiWeb version 7.0.0…
    Fortinet
  23. 6.8
    CVE-2022-41336 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 through 6.0.11 and all…
    Fortinet
  24. 7.8
    CVE-2022-35845 Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  25. 9.8
    CVE-2022-42475 A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2…
    Fortinet
    kev+ ransomware EPSS 99.5% chance of exploitation in 30 days, percentile 99.9%
  26. 5.4
    CVE-2022-33875 An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, v…
    Fortinet
  27. 5.4
    CVE-2022-33876 Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6…
    Fortinet
  28. 3.5
    CVE-2022-38379 Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated…
    Fortinet
  29. 3.7
    CVE-2022-30305 An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDecepto…
    Fortinet
  30. 4.0
    CVE-2022-40680 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12,…
    Fortinet