Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 7.2
    CVE-2024-50566 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  2. 9.8
    CVE-2024-55591 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and Fort…
    Fortinet
    kev+ ransomware EPSS 94.4% chance of exploitation in 30 days, percentile 99.8%
  3. 3.7
    CVE-2024-52963 A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.…
    Fortinet
  4. 6.8
    CVE-2024-48893 An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2…
    Fortinet
  5. 3.7
    CVE-2024-46665 An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 through 7.4.4 may allow an attacker in…
    Fortinet
  6. 9.8
    CVE-2021-26102 A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated…
    Fortinet
    EPSS 19.7% chance of exploitation in 30 days, percentile 97%
  7. 8.1
    CVE-2021-32589 A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 an…
    Fortinet
    EPSS 8.9% chance of exploitation in 30 days, percentile 95%
  8. 7.8
    CVE-2021-26115 An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated…
    Fortinet
  9. 8.8
    CVE-2020-15934 An execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux versions 6.2.7 and below, version 6.4.0.
    Fortinet
  10. 5.4
    CVE-2020-12820 Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a re…
    Fortinet
  11. 7.3
    CVE-2021-26093 An access of uninitialized pointer (CWE-824) vulnerability in FortiWLC versions 8.6.0, 8.5.3 and earlier may allow a local and authenticate…
    Fortinet
  12. 5.4
    CVE-2020-12819 A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4…
    Fortinet
  13. 7.2
    CVE-2024-48889 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager versio…
    Fortinet
    EPSS 1.7% chance of exploitation in 30 days, percentile 77%
  14. 9.8
    CVE-2023-34990 A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized…
    Fortinet
    EPSS 25.0% chance of exploitation in 30 days, percentile 97%
  15. 5.0
    CVE-2024-50570 A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0 through 7.2.6, 7.0.0…
    Fortinet
  16. 7.8
    CVE-2024-47574 A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, vers…
    Fortinet
  17. 6.7
    CVE-2024-31496 A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer…
    Fortinet
  18. 4.2
    CVE-2024-36509 An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.…
    Fortinet
  19. 5.6
    CVE-2024-33505 A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 throug…
    Fortinet
  20. 5.3
    CVE-2024-26011 A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4…
    Fortinet
  21. 2.3
    CVE-2024-35274 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions…
    Fortinet
  22. 6.7
    CVE-2024-32118 Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet Fo…
    Fortinet
  23. 5.1
    CVE-2024-32116 Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnaly…
    Fortinet
  24. 4.1
    CVE-2023-44255 An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 a…
    Fortinet
  25. 5.4
    CVE-2023-47543 An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an a…
    Fortinet
  26. 4.9
    CVE-2024-32117 An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7…
    Fortinet
  27. 7.5
    CVE-2024-40592 An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, ve…
    Fortinet
  28. 7.3
    CVE-2024-36507 A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows a…
    Fortinet
  29. 4.3
    CVE-2024-33510 An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS ver…
    Fortinet
  30. 4.2
    CVE-2023-50176 A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows…
    Fortinet