Vulnerabilities fixed in Fortinet FortiManager, FortiAnalyzer and FortiClient-EMS

🗓️ 15 Mar 2024 00:00:00Reported by NCSCType

Fixed FortiManager, FortiAnalyzer and FortiClient-EMS vulnerabilities including SQL injection, data manipulation and remote code execution.

Reporter	Title	Published	Views	Family All 79
0day.today	FortiNet FortiClient EMS 7.2.2 / 7.0.10 SQL Injection / Remote Code Execution Exploit	23 Apr 202400:00	–	zdt
GithubExploit	Exploit for SQL Injection in Fortinet Forticlient_Enterprise_Management_Server	18 Mar 202420:50	–	githubexploit
ICS	#StopRansomware: RansomHub Ransomware	29 Aug 202412:00	–	ics
ATTACKERKB	CVE-2023-48788	12 Mar 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) server lies in the lack of security measures for the SQL query structure, allowing attackers to execute arbitrary code or commands.	15 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software for centralized device management in Fortinet’s FortiManager, the security event monitoring and analysis tools FortiAnalyzer, FortiAnalyzer-BigData, and the security analytics and management tool FortiPortal, arises due to the use of an uncontrolled format string. This allows a malicious individual to execute arbitrary codes or commands.	15 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) server lies in the lack of mechanisms to neutralize elements in CSV files. This allows a malicious actor to execute arbitrary codes or commands.	15 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Wireless Manager (FortiWLM MEA) extension of the Fortinet FortiManager device management software allows a attacker to execute arbitrary code or commands.	15 Mar 202400:00	–	bdu_fstec
Circl	CVE-2023-36554	12 Mar 202416:26	–	circl
Circl	CVE-2023-41842	12 Mar 202416:26	–	circl