Fortimanager Firmware (Fortinet) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2018-07-16. Vendor: Fortinet.
CVEs of Fortimanager Firmware
- CVE-2017-17541 - CVSS 6.1 (medium), 2018-07-16: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows…
- CVE-2015-3617 - CVSS 7.8 (high), 2017-08-22: Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
- CVE-2015-3616 - CVSS 9.8 (critical), 2017-08-11: SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via…
- CVE-2015-3615 - CVSS 5.4 (medium), 2017-08-11: Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject…
- CVE-2015-3614 - CVSS 7.5 (high), 2017-08-11: Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified…
- CVE-2017-3126 - CVSS 6.1 (medium), 2017-05-27: An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code…
- CVE-2016-8495 - CVSS 7.4 (high), 2017-02-13: An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a…
- CVE-2015-7363 - CVSS 5.4 (medium), 2016-10-07: Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware models…
- CVE-2016-3195 - CVSS 6.1 (medium), 2016-08-19: Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13…
- CVE-2016-3194 - CVSS 6.1 (medium), 2016-08-19: Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x…
- CVE-2016-3193 - CVSS 5.4 (medium), 2016-08-19: Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before…
- CVE-2016-3196 - CVSS 5.4 (medium), 2016-08-05: Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x…
- CVE-2015-8038 - CVSS 4.3 (medium), 2015-11-02: Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to…
- CVE-2015-8037 - CVSS 4.3 (medium), 2015-11-02: Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to…
- CVE-2015-3620 - CVSS 4.3 (medium), 2015-05-12: Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and…
