Fortiedr (Fortinet) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 27 known versions, newest CVE from 2023-11-14. Vendor: Fortinet.

CVEs of Fortiedr

• CVE-2023-44248 - CVSS 5.5 (medium), 2023-11-14: An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local…
• CVE-2023-33303 - CVSS 8.1 (high), 2023-10-13: A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands via api request
• CVE-2022-39949 - CVSS 5.5 (medium), 2022-11-02: An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0…
• CVE-2022-29057 - CVSS 5.4 (medium), 2022-07-19: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiEDR version 5.1.0, 5.0.0 through 5.0.3 Patch 6 and…
• CVE-2022-23440 - CVSS 7.8 (high), 2022-04-06: A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may…
• CVE-2022-23446 - CVSS 4.4 (medium), 2022-04-06: A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole application…
• CVE-2022-23441 - CVSS 9.1 (critical), 2022-04-06: A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the…