Skip to content

Fortinet Fortianalyzer vulnerabilities

fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA buffer copy without checking size of input ('classic buffer overflow') in Fortinet...CVE-2021-430726.3 MediumJuly 18, 2023
fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2023-256066.2 MediumJuly 11, 2023
fortinet fortianalyzer, fortimanager +1 moreA server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer...CVE-2023-256094.2 MediumJune 13, 2023
fortinet fortianalyzer, fortimanager +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2...CVE-2023-226426.8 MediumApril 11, 2023
fortinet fortianalyzerAn improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below,...CVE-2022-424776.5 MediumApril 11, 2023
fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreA exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0...CVE-2022-274905.1 MediumMarch 7, 2023
fortinet fortianalyzerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...CVE-2023-237764.6 MediumMarch 7, 2023
fortinet fortianalyzerA improper neutralization of formula elements in a CSV file vulnerability in Fortinet...CVE-2023-256114.0 MediumMarch 7, 2023
fortinet fortianalyzerAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-303044.2 MediumFebruary 16, 2023
fortinet fortianalyzer, fortimanager +1 moreAn improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6...CVE-2022-383774.1 MediumNovember 25, 2022
fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] exists in...CVE-2022-399508.0 HighNovember 2, 2022
fortinet fortianalyzer, fortimanager +1 moreAn exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager...CVE-2022-261213.7 LowOctober 10, 2022
fortinet fortianalyzer, fortimanager, fortimanager , fortianalyzer +2 moreA privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4...CVE-2022-261186.7 MediumJuly 18, 2022
fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274837.2 HighJuly 18, 2022
fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreMultiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 an…CVE-2021-261047.8 HighApril 6, 2022
fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5...CVE-2022-223004.3 MediumMarch 1, 2022
fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 MediumDecember 8, 2021
fortinet fortianalyzerA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2020-128144.1 MediumNovember 2, 2021
fortinet fortianalyzerAn improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and...CVE-2021-240214.3 MediumOctober 6, 2021
fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreAn information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions...CVE-2021-361703.2 LowOctober 6, 2021
fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6...CVE-2021-325874.3 MediumAugust 6, 2021
fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreMultiple improper neutralization of input during web page generation (CWE-79) in FortiManager and...CVE-2021-325974.6 MediumAugust 6, 2021
fortinet fortimanager, fortianalyzer, fortianalyzer, fortimanager +2 moreA server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser...CVE-2021-326038.8 HighAugust 5, 2021
fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...CVE-2021-325984.3 MediumAugust 5, 2021
fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreA buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and...CVE-2021-240226.7 MediumJuly 20, 2021
fortinet fortimanager, fortianalyzer +1 moreAn improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1...CVE-2020-128114.9 MediumSeptember 24, 2020
fortinet fortitester, fortianalyzer +1 moreAn improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote...CVE-2020-128155.4 MediumSeptember 24, 2020
fortinet fortianalyzer, fortitester +1 moreAn improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may...CVE-2020-128178.8 HighSeptember 24, 2020
fortinet fortianalyzer, fortimanager +1 moreUse of a hard-coded cryptographic key to encrypt password data in CLI configuration in...CVE-2020-9289Public exploit7.5 HighJune 16, 2020
fortinet fortianalyzerAn improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow...CVE-2020-66405.4 MediumJune 4, 2020
fortinet fortianalyzer, fortiap-s, fortimanager +2 more +4 moreAn Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6...CVE-2019-17657Fix available7.5 HighApril 7, 2020
fortinet fortianalyzer, fortimanager +1 moreAn Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below...CVE-2018-133756.1 MediumMay 28, 2019
fortinet fortianalyzer firmware, fortimanager firmware, fortimanager, fortianalyzer +2 moreA Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below...CVE-2017-175416.1 MediumJuly 16, 2018
fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +1 more +3 moreAn open redirect vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions,...CVE-2018-13556.1 MediumJune 27, 2018
fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +1 more +3 moreAn improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions...CVE-2018-13546.5 MediumJune 27, 2018
fortinet fortianalyzer firmware, fortimanager firmware, fortianalyzer, fortimanager +1 more +3 moreAn Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4...CVE-2017-31266.1 MediumMay 26, 2017
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5...CVE-2015-73635.4 MediumOctober 7, 2016
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12...CVE-2016-31956.1 MediumAugust 19, 2016
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x...CVE-2016-31946.1 MediumAugust 19, 2016
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet...CVE-2016-31935.4 MediumAugust 19, 2016
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x...CVE-2016-31965.4 MediumAugust 5, 2016
fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet...CVE-2015-36204.3 MediumMay 12, 2015
fortinet fortimanager, fortianalyzer firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet...CVE-2014-23364.3 MediumOctober 31, 2014
fortinet fortianalyzer firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet...CVE-2014-23354.3 MediumOctober 31, 2014
fortinet fortianalyzer firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet...CVE-2014-23344.3 MediumOctober 31, 2014
fortinet fortianalyzer-1000d, fortianalyzer-2000b, fortianalyzer-200d +4 more +6 morecgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does...CVE-2013-6826Public exploit6.8 MediumNovember 19, 2013