Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 6.5
    CVE-2022-45861 An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7…
    Fortinet
  2. 5.4
    CVE-2022-27490 A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.…
    Fortinet
  3. 7.5
    CVE-2022-40676 A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9…
    Fortinet
  4. 6.7
    CVE-2022-41328 A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 t…
    Fortinet
    kev EPSS 10.7% chance of exploitation in 30 days, percentile 95%
  5. 5.5
    CVE-2022-22297 An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb ve…
    Fortinet
  6. 4.6
    CVE-2023-23776 An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0…
    Fortinet
  7. 7.5
    CVE-2022-41333 An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authenticatio…
    Fortinet
    1 public exploit EPSS 7.2% chance of exploitation in 30 days, percentile 94%
  8. 7.8
    CVE-2022-39953 A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.…
    Fortinet
  9. 7.2
    CVE-2022-39951 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0…
    Fortinet
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  10. 4.0
    CVE-2023-25611 A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0…
    Fortinet
  11. 7.5
    CVE-2023-25605 A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interfac…
    Fortinet
  12. 7.0
    CVE-2023-22636 An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 through 7.0.4 may allo…
    Fortinet
  13. 8.8
    CVE-2022-33869 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 t…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  14. 3.3
    CVE-2022-29054 A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0…
    Fortinet
  15. 5.9
    CVE-2022-26115 A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker wi…
    Fortinet
  16. 7.1
    CVE-2023-22638 Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9…
    Fortinet
  17. 7.8
    CVE-2022-40683 A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially c…
    Fortinet
  18. 4.2
    CVE-2022-42472 A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet FortiOS 7.2.0 through 7.2…
    Fortinet
  19. 7.2
    CVE-2022-40677 A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2…
    Fortinet
  20. 9.8
    CVE-2022-39952 A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11…
    Fortinet
    1 public exploit EPSS 99.8% chance of exploitation in 30 days, percentile 99.9%
  21. 6.5
    CVE-2022-40675 Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11…
    Fortinet
  22. 7.3
    CVE-2022-39954 An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9…
    Fortinet
  23. 7.4
    CVE-2022-40678 An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11…
    Fortinet
  24. 7.8
    CVE-2022-27482 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0…
    Fortinet
  25. 7.2
    CVE-2022-27489 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.0.0 through 7.0.3,…
    Fortinet
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  26. 4.2
    CVE-2022-38378 An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and FortiProxy version 7.2.0 th…
    Fortinet
  27. 8.8
    CVE-2022-41334 An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7 and 7.2.0 to 7.2.3…
    Fortinet
  28. 4.8
    CVE-2022-39948 An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all v…
    Fortinet
  29. 4.3
    CVE-2022-30304 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6…
    Fortinet
  30. 6.1
    CVE-2022-38376 Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC…
    Fortinet