Fortinet FortiWeb 路径遍历漏洞

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. A path traversal vulnerability exists that...

Fortinet FortiOS Privilege Escalation (FG-IR-20-131)

The remote host is running a version of FortiOS prior or equal to 6.0.12, 6.2.x prior or equal to 6.2.9, 6.4.x prior or equal to 6.4.6, 7.0.0 or FortiOS-6K7K version prior or equal to 6.2.6, 6.4.2. It is, therefore, affected by a privilege escalation vulnerability in FortiOS autod daemon, which m...

Fortinet FortiClient Network Access Control Uncontrolled Search Path Element Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient Network Access Control. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Fortinet FortiClient Trust Management Issue Vulnerability (CNVD-2022-03936)

Fortinet FortiClient is a mobile endpoint security solution from Fortinet, a US-based company. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance.Fortinet FortiClient has a security...

Fortinet FortiOS CSRF (FG-IR-20-158)

The remote host is running a version of FortiOS that is 5.6.x, 6.0.x, 6.2.x prior or equal to 6.2.9, 6.4.x prior or equal to 6.4.6, 7.0.0. It is, therefore, affected by a cross-site request forgery vulnerability in the user interface of FortiGate SSL VPN portal, which may allow a remote,...

Fortinet FortiOS Integer Overflow (FG-IR-21-049)

The remote host is running a version of FortiOS prior or equal to 6.0.12, 6.2.x prior or equal to 6.2.9, 6.4.x prior or equal to 6.4.5 or 7.0.0. It is, therefore, affected by an integer overflow vulnerability in FortiOS SSLVPN memory allocator may allow an unauthenticated attacker to corrupt...

Fortinet FortiOS Hard-Coded Cryptographic Key (FG-IR-21-051)

The remote host is running a version of FortiOS prior to 5.6.13, 6.0.x prior or equal to 6.0.12, 6.2.x prior or equal to 6.2.8, or 6.4.x prior or equal to 6.4.5, FortiOS-6K7K version prior to 6.2.6 and 6.4.2. It is, therefore, affected by a hard-coded cryptographic key vulnerability in FortiOS...

Fortinet FortiOS Buffer Overflow Vulnerability (CNVD-2022-08470)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

The software’s vulnerability regarding centralized device management by Fortinet FortiManager and the FortiAnalyzer network switch makes it susceptible to attacks. This vulnerability arises due to insufficient measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the software for centralized device management of Fortinet’s FortiManager and FortiAnalyzer devices exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attac...

Fortinet FortiOS and FortiProxy Out-of-bounds Write

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users...

Fortinet FortiOS and FortiProxy Improper Authorization

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password...

Fortinet FortiOS Buffer Overflow (FG-IR-21-173)

The remote host is running a version of FortiOS prior to 6.0.13, 6.2.x prior or equal to 6.2.9, 6.4.x prior or equal to 6.4.7, 7.0.x prior or equal to 7.0.2 or FortiOS-6K7K version prior to 6.2.8. It is, therefore, affected by a buffer overflow vulnerability in the TFTP client library of FortiOS,...

Fortinet FortiOS Heap-based Buffer Overflow (FG-IR-21-115)

The remote host is running a version of FortiOS prior to 6.0.13, 6.2.x prior or equal to 6.2.9, 6.4.x prior or equal to 6.4.6, 7.0.x prior or equal to 7.0.1, FortiOS-6K7 prior to 6.0.10, 6.2.x prior or equal to 6.2.7, 6.4.x prior or equal to 6.4.2. It is, therefore, affected by a heap-based buffe...

CVE-2020-15933

A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to obtain potentially sensitive software-version information via client-side resources inspection...

Design/Logic Flaw

A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to obtain potentially sensitive software-version information via client-side resources inspection...

CVE-2020-15933

CVE-2020-15933 affects Fortinet FortiMail prior to certain versions, where an attacker could learn potentially sensitive software-version information by inspecting client-side resources. The vulnerability impacts FortiMail 6.0.9 and earlier, 6.2.4 and earlier, and 6.4.0–6.4.1. The underlying issu...

CVE-2020-15933

A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to obtain potentially sensitive software-version information via client-side resources inspection...

CVE-2020-15933

A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to obtain potentially sensitive software-version information via client-side resources inspection...

The vulnerability of the graphical interface of the Fortinet FortiManager device management software and the Fortinet FortiAnalyzer security event monitoring and analysis software allows a hacker to obtain a list of administrative users from other ADOMs and their configurations.

The vulnerability of the graphical interface of the Fortinet FortiManager device management center and the Fortinet FortiAnalyzer event monitoring and analysis tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely,...

Fortinet FortiWeb Resource Management Error Vulnerability (CNVD-2024-26508)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...