Fortinet Fortimanager (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-07-19. Vendor: Fortinet.
CVEs of Fortinet Fortimanager
- CVE-2022-27483 - CVSS 7.2 (high), 2022-07-19: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0…
- CVE-2022-26118 - CVSS 6.7 (medium), 2022-07-18: A privilege chaining vulnerability [CWE-268] in FortiManager and FortiAnalyzer 6.0.x, 6.2.x, 6.4.0 through 6.4.7, 7.0.0 through 7.0.3 may allow a local and…
- CVE-2021-26104 - CVSS 7.8 (high), 2022-04-06: Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of…
- CVE-2022-22303 - CVSS 5.5 (medium), 2022-03-02: An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiManager versions prior to 7.0.2, 6.4.7 and 6.2.9…
- CVE-2022-22300 - CVSS 8.8 (high), 2022-03-01: A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through…
- CVE-2021-36192 - CVSS 5.2 (medium), 2021-11-03: An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0…
- CVE-2021-26107 - CVSS 6.3 (medium), 2021-11-02: An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile…
- CVE-2021-36170 - CVSS 3.2 (low), 2021-10-06: An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker…
- CVE-2021-24017 - CVSS 5.4 (medium), 2021-09-30: An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via…
- CVE-2021-24016 - CVSS 6.3 (medium), 2021-09-30: An improper neutralization of formula elements in a csv file in Fortinet FortiManager version 6.4.3 and below, 6.2.7 and below allows attacker to execute…
- CVE-2021-24006 - CVSS 8.8 (high), 2021-09-06: An improper access control vulnerability in FortiManager versions 6.4.0 to 6.4.3 may allow an authenticated attacker with a restricted user profile to access…
- CVE-2019-17654 - CVSS 8.8 (high), 2020-03-15: An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated attacker to perform…
- CVE-2017-17541 - CVSS 6.1 (medium), 2018-07-16: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows…
