Design/Logic Flaw

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

Design/Logic Flaw

FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...

Crlf injection

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-1955

Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-1956

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2014-1957

FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2013-6990

FortiAuthenticator before version 3.0 is affected by CVE-2013-6990, a privilege-escalation flaw that lets remote administrators gain root-level access via the command-line interface. The issue is discussed in Fortinet FG-IR-13-016 and is echoed by multiple vulnerability reports describing a subsh...

CVE-2014-1957

Fortinet FortiWeb is affected by CVE-2014-1957 (FortiWeb prior to 5.0.3). The vulnerability allows remote authenticated users to gain privileges via unspecified vectors. Affected product: FortiWeb; vulnerable component/issue: privilege escalation in versions before 5.0.3. The issue is confirmed a...

CVE-2014-1955

FortiWeb (Fortinet) FortiWeb 4.x/5.x is affected by CVE-2014-1955, a cross-site scripting (XSS) vulnerability present in versions prior to 5.0.3. The issue allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors. The NVD entry lists a CVSS v2 base score of 4.3 (Med...

CVE-2014-1956

CVE-2014-1956 describes a CRLF injection in Fortinet FortiWeb prior to version 5.0.3, enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. The vulnerability is documented across multiple sources (NVD entry and FortiGuard FG-IR-13-...

CVE-2013-6990

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

CVE-2014-1955: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6990: Undefined Security Weakness

FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface...

PT-2014-4380

Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions prior to 5.0.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 5.0.3, update to version 5.0.3 or later to resolve t...

PT-2014-3240

Name of the Vulnerable Software and Affected Versions FortiGuard FortiAuthenticator versions prior to 3.0 Description The issue allows remote administrators to gain privileges via the command line interface. Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the...

PT-2014-4381

Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions prior to 5.0.3 Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. Recommendations For versions prior to 5.0.3, update to version 5.0.3 or lat...

CVE-2014-1956: Undefined Security Weakness

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

PT-2014-4382

Name of the Vulnerable Software and Affected Versions FortiGuard FortiWeb versions prior to 5.0.3 Description The issue allows remote authenticated users to gain privileges. Recommendations For versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue...

CVE-2014-1957: Undefined Security Weakness

FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors...

Fortinet FortiOS 5.x < 5.0.3 Security Bypass

The remote host is running FortiOS 5.x prior to 5.0.3. It is, therefore, affected by a security bypass vulnerability due to a failure to properly manage the Guest user permission. An attacker could potentially exploit this vulnerability to view, change, or delete records of users from another...