Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 10.0
    CVE-2024-23109 An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to…
    Fortinet
    EPSS 3.3% chance of exploitation in 30 days, percentile 88%
  2. 5.4
    CVE-2023-48783 An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and below, version 7.0.6 an…
    Fortinet
    EPSS 22.2% chance of exploitation in 30 days, percentile 97%
  3. 7.2
    CVE-2023-46712 A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows atta…
    Fortinet
  4. 8.8
    CVE-2023-44250 An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a Fo…
    Fortinet
  5. 4.3
    CVE-2023-37934 An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attack…
    Fortinet
  6. 6.5
    CVE-2023-37932 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.…
    Fortinet
  7. 8.3
    CVE-2023-44251 ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in F…
    Fortinet
  8. 8.8
    CVE-2023-44252 ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 through 5.2.1 and vers…
    Fortinet
  9. 3.1
    CVE-2023-47536 An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 and below and FortiPr…
    Fortinet
  10. 8.8
    CVE-2023-48791 An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPortal version 7.2.0,…
    Fortinet
    EPSS 1.3% chance of exploitation in 30 days, percentile 70%
  11. 8.8
    CVE-2023-41678 A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker t…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  12. 6.7
    CVE-2023-40716 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpreter of FortiTester…
    Fortinet
  13. 7.1
    CVE-2023-41673 An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to re…
    Fortinet
  14. 7.2
    CVE-2023-36639 A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  15. 3.5
    CVE-2023-41844 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through…
    Fortinet
  16. 5.3
    CVE-2023-46713 An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.2.5 and 7.4.0 may a…
    Fortinet
  17. 3.5
    CVE-2023-45587 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 throug…
    Fortinet
  18. 8.3
    CVE-2022-27488 A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 t…
    Fortinet
  19. 8.8
    CVE-2023-48782 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6…
    Fortinet
    EPSS 2.7% chance of exploitation in 30 days, percentile 85%
  20. 7.1
    CVE-2022-40681 A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attack…
    Fortinet
  21. 5.4
    CVE-2023-25603 A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4…
    Fortinet
  22. 4.1
    CVE-2023-40719 A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an a…
    Fortinet
  23. 6.7
    CVE-2023-29177 Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and bef…
    Fortinet
  24. 5.4
    CVE-2023-36633 An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated…
    Fortinet
  25. 9.8
    CVE-2023-34991 A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and…
    Fortinet
    EPSS 28.8% chance of exploitation in 30 days, percentile 98%
  26. 4.4
    CVE-2023-33304 A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass…
    Fortinet
  27. 4.4
    CVE-2023-44248 An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all…
    Fortinet
  28. 8.1
    CVE-2023-26205 An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions,…
    Fortinet
  29. 2.3
    CVE-2023-45585 An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.…
    Fortinet
  30. 4.3
    CVE-2023-41676 An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker w…
    Fortinet