5925 matches found
CVE-2015-3617
The CVE-2015-3617 entry applies to Fortinet FortiManager, specifically FortiManager 5.0 prior to 5.0.11 and 5.2 prior to 5.2.2. The vulnerability is an Elevation of Privilege via specially crafted CLI commands that allow a local attacker to gain higher privileges within FortiManager. The connecte...
Fortinet FortiManager Cross-Site Scripting Vulnerability (CNVD-2017-237899)
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...
Fortinet FortiManager Information Disclosure Vulnerability
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...
fortinet.com XSS vulnerability
Vulnerable URL: https://www.fortinet.com/search.html?q=%27%22%3E%3Csvg%2Fonload%3Dprompt%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12630 VIP website status:| Yes Coordinated Disclosure...
Sql injection
SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters...
CVE-2015-3616
SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters...
Design/Logic Flaw
Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability...
CVE-2015-3614
Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack...
CVE-2015-3615
Cross-site scripting XSS vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack...
CVE-2015-3614
Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability...
CVE-2015-3616
SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters...
CVE-2015-3616
Fortinet FortiManager is affected by CVE-2015-3616 due to a SQL injection in FortiManager 5.0.x before 5.0.11 and 5.2.x before 5.2.2. A remote attacker can exploit unspecified parameters to execute arbitrary commands. Impact: potential remote code execution with high severity. Affected components...
CVE-2015-3614
Fortinet FortiManager is affected. Versions 5.0.x before 5.0.11 and 5.2.x before 5.2.2 contain an information-disclosure vulnerability that allows remote attackers to obtain arbitrary files via a vector involving another unspecified vulnerability. The issue is caused by a vulnerability in FortiMa...
CVE-2015-3615
Fortinet FortiManager is affected by a Cross‑Site Scripting (XSS) vulnerability in FortiManager 5.0.x before 5.0.11 and 5.2.x before 5.2.2. A remote authenticated user can inject arbitrary web script or HTML via unspecified parameters, with privilege escalation potential. Root cause and exact exp...
CVE-2015-3615
Cross-site scripting XSS vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack...
FortiOS IKE VendorID version information disclosure
The FortiOS IKE packets which include the Vendor ID embed the FortiOS build version number...
Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2017-20964)
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...
