Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 4.3
    CVE-2022-43950 A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below…
    Fortinet
  2. 4.1
    CVE-2022-45859 An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and b…
    Fortinet
  3. 6.0
    CVE-2023-27993 A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary dir…
    Fortinet
  4. 7.8
    CVE-2023-27999 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allo…
    Fortinet
  5. 7.5
    CVE-2023-22640 A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, Fo…
    Fortinet
  6. 4.3
    CVE-2022-35850 An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.…
    Fortinet
  7. 4.3
    CVE-2022-42469 A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and below Policy-based NGFW…
    Fortinet
  8. 7.5
    CVE-2023-22642 An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.…
    Fortinet
  9. 6.5
    CVE-2022-27485 A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortinet FortiSandbox vers…
    Fortinet
  10. 5.0
    CVE-2022-43947 An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 through 7.2.3 and be…
    Fortinet
  11. 8.8
    CVE-2022-27487 A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before 3.2.3 and FortiDecepto…
    Fortinet
  12. 7.5
    CVE-2022-43946 Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check tim…
    Fortinet
  13. 8.8
    CVE-2022-43955 An improper neutralization of input during web page generation [CWE-79] in the FortiWeb web interface 7.0.0 through 7.0.3, 6.3.0 through 6.…
    Fortinet
  14. 3.5
    CVE-2022-43952 An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 an…
    Fortinet
  15. 7.1
    CVE-2022-42477 An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may…
    Fortinet
  16. 4.1
    CVE-2023-22641 A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9,…
    Fortinet
  17. 6.7
    CVE-2022-43948 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0…
    Fortinet
  18. 9.8
    CVE-2022-41331 A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  19. 7.8
    CVE-2022-42470 A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 al…
    Fortinet
  20. 7.8
    CVE-2022-40682 A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attack…
    Fortinet
  21. 7.8
    CVE-2022-40679 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 5.x all versions, 6.0 all versions,…
    Fortinet
  22. 5.3
    CVE-2022-43951 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 a…
    Fortinet
  23. 7.2
    CVE-2023-27995 A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an a…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  24. 8.8
    CVE-2022-41330 An improper neutralization of input during web page generation vulnerability ('Cross-site Scripting') [CWE-79] in Fortinet FortiOS version…
    Fortinet
  25. 7.3
    CVE-2023-22635 A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all…
    Fortinet
  26. 3.7
    CVE-2023-26209 A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a rem…
    Fortinet
    EPSS 1.7% chance of exploitation in 30 days, percentile 78%
  27. 3.7
    CVE-2023-26208 A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows…
    Fortinet
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  28. 3.7
    CVE-2022-29056 A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 thro…
    Fortinet
    EPSS 1.8% chance of exploitation in 30 days, percentile 78%
  29. 5.3
    CVE-2022-41329 An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 an…
    Fortinet
  30. 8.2
    CVE-2022-42476 A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiO…
    Fortinet