Cross site request forgery (csrf)

A cross-site request forgery CSRF in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3, 6.4.0 through 6.4.6, 6.2.x, 6.0.x FortiRecorder version 6.4.0 through 6.4.2,...

CVE-2022-27488

CVE-2022-27488 describes a cross-site request forgery (CSRF) vulnerability in multiple Fortinet products (FortiVoiceEnterprise, FortiSwitch, FortiMail, FortiRecorder, FortiNDR) where an unauthenticated attacker can cause an authenticated admin to trigger commands on the CLI via a crafted HTTP GET...

Fortinet FortiVoice Security Vulnerability

Fortinet FortiSwitch and others are products of Fortinet, Inc. FortiSwitch is a switch product and Fortinet FortiVoice is a product of tine and others are products of tine, Inc. tine is a team collaboration software. A security vulnerability exists in Fortinet FortiVoiceEnterprise, FortiSwitch,...

PT-2023-8025 · Fortinet · Fortiswitch +4

Name of the Vulnerable Software and Affected Versions: FortiVoiceEnterprise versions 6.0.x through 6.4.x FortiSwitch versions 6.0.x through 7.0.4 FortiMail versions 6.0.x through 7.0.3 FortiRecorder versions 2.6.x through 6.4.2 FortiNDR version 1.x.x Description: A cross-site request forgery CSRF...

The vulnerability of the Fortinet FortiNDR (Network Detection and Response) software, a hardware-based information protection solution utilizing AI and deep neural networks, stems from insufficient validation of input data. This allows attackers to exploit their privileges.

The vulnerability of the software-hardware security solution based on AI and deep neural networks DNN from Fortinet FortiNDR is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

FortiMail / FortiNDR / FortiWeb - Path traversal vulnerabilities

Multiple Path traversal vulnerabilities in FortiMail, FortiNDR & FortiWeb may allow a regular user to obtain unauthorized access to files and data via specifically crafted web requests...

FortiNDR - OS command injection due to improper input sanitization

An improper input validation in FortiNDR v1.4.0 may allow an authenticated user to gain system shell access via a malicious payload in the "diagnose" command...