Skip to contentFortinet Fortimanager vulnerabilities
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2024-321174.7 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreA client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData
at least...CVE-2024-23666Public exploit7.1 High
- fortinet fortimanager, fortimanager cloud +1 moreA missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through...CVE-2024-47575In KEVPublic exploitEPSS 94.8%9.8 Critical
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...CVE-2024-335063.1 Low
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer...CVE-2023-442544.7 Medium
- fortinet fortianalyzer, fortimanager +1 moreA unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2...CVE-2024-217575.5 Medium
- fortinet fortimanagerA improper neutralization of special elements used in a template engine [CWE-1336] in...CVE-2023-475426.3 Medium
- fortinet fortimanager, fortianalyzer, fortianalyzer-bigdata +2 more +4 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager...CVE-2023-418426.3 Medium
- fortinet fortimanagerA improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3,...CVE-2023-365547.7 High
- fortinet fortimanager, fortianalyzer +1 moreA relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0...CVE-2023-42791Public exploit8.6 High
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet...CVE-2023-442534.7 Medium
- fortinet fortianalyzer, fortimanager +1 moreA use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 -...CVE-2023-407194.1 Medium
- fortinet fortianalyzer, fortimanager +1 moreA server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3…CVE-2023-442566.4 Medium
- fortinet fortimanagerAn improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0...CVE-2023-416797.7 High
- fortinet fortiadc, fortianalyzer, fortimanager +2 moreAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...CVE-2023-256077.4 High
- fortinet fortianalyzer, fortianalyzer-bigdata, fortimanager +2 moreA insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version...CVE-2023-427825.0 Medium
- fortinet fortimanager, fortianalyzer +1 moreAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-418386.9 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper neutralization of special elements used in an os command ('OS Command Injection')...CVE-2023-427887.6 High
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet...CVE-2023-427876.2 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet...CVE-2023-442494.1 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper privilege management vulnerability [CWE-269] in FortiManager 7.2.0 through 7.2.2, 7.0...CVE-2023-366384.2 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6...CVE-2022-223055.4 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA buffer copy without checking size of input ('classic buffer overflow') in Fortinet...CVE-2021-430726.3 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...CVE-2023-256066.2 Medium
- fortinet fortianalyzer, fortimanager +1 moreA server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer...CVE-2023-256094.2 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2...CVE-2023-226426.8 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreA exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0...CVE-2022-274905.1 Medium
- fortinet fortimanagerAn incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below...CVE-2022-458576.0 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6...CVE-2022-383774.1 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] exists in...CVE-2022-399508.0 High
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager...CVE-2022-261213.7 Low
- fortinet fortianalyzer, fortimanager, fortimanager , fortianalyzer +2 moreA privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4...CVE-2022-261186.7 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2022-274837.2 High
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreMultiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 an…CVE-2021-261047.8 High
- fortinet fortimanagerAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...CVE-2022-223032.8 Low
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5...CVE-2022-223004.3 Medium
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortimanagerAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in...CVE-2021-361925.2 Medium
- fortinet fortimanagerAn improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may...CVE-2021-261076.3 Medium
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreAn information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions...CVE-2021-361703.2 Low
- fortinet fortimanagerAn improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below...CVE-2021-240175.4 Medium
- fortinet fortimanagerAn improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4...CVE-2021-240163.7 Low
- fortinet fortimanagerAn improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an...CVE-2021-24006Public exploit6.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6...CVE-2021-325874.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreMultiple improper neutralization of input during web page generation (CWE-79) in FortiManager and...CVE-2021-325974.6 Medium
- fortinet fortimanager, fortianalyzer, fortianalyzer, fortimanager +2 moreA server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser...CVE-2021-326038.8 High
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreAn improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting')...CVE-2021-325984.3 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer, fortimanager +2 moreA buffer overflow vulnerability in FortiAnalyzer CLI 6.4.5 and below, 6.2.7 and below, 6.0.x and...CVE-2021-240226.7 Medium
- fortinet fortimanager, fortianalyzer +1 moreAn improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1...CVE-2020-128114.9 Medium
- fortinet fortianalyzer, fortimanager +1 moreUse of a hard-coded cryptographic key to encrypt password data in CLI configuration in...CVE-2020-9289Public exploit7.5 High
- Show moreLoading…