CVE-2019-17653

A Cross-Site Request Forgery CSRF vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link...

CVE-2020-6643

CVE-2020-6643 affects Fortinet FortiIsolator 1.2.2. The issue is an improper neutralization of input in the URL Description, enabling a remote authenticated attacker to perform a cross-site scripting (XSS) attack. Documentation indicates a stored XSS variant via a parameter in the request (as des...

CVE-2020-6643

An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack XSS...

CVE-2019-16156

CVE-2019-16156 affects Fortinet FortiWeb 6.0.5, 6.2.0 and 6.1.1, where an Improper Neutralization of Input in the Anomaly Detection Parameter/Interface can enable a remote unauthenticated attacker to perform a Cross Site Scripting (XSS) attack. The linked connected documents confirm the root caus...

PT-2020-19201

Name of the Vulnerable Software and Affected Versions Fortinet FortiIsolator version 1.2.2 Description The issue is related to an improper neutralization of input in the URL Description, allowing a remote authenticated attacker to perform a cross-site scripting attack XSS. Recommendations For...

CVE-2020-6643: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross site scripting attack XSS...

CVE-2019-16156: Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack XSS...

CVE-2019-17653: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary actions using an authenticated user's session by persuading the victim to follow a malicious link...

PT-2020-9795

Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 6.0.5 through 6.2.0 Fortinet FortiWeb version 6.1.1 Description An Improper Neutralization of Input issue in the Anomaly Detection Parameter Name may allow a remote unauthenticated attacker to perform a Cross Site...

[SECURITY] Fedora 31 Update: openfortivpn-1.12.0-1.fc31

openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...

[SECURITY] Fedora 30 Update: openfortivpn-1.12.0-1.fc30

openfortivpn is a client for PPP+SSL VPN tunnel services. It spawns a pppd process and operates the communication between the gateway and this process. It is compatible with Fortinet VPNs...

Fedora: Security Advisory for openfortivpn (FEDORA-2020-42eb8821db)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for openfortivpn (FEDORA-2020-c96ab3c813)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fortinet FortiOS 5.x >= 5.4.0 / 6.x < 6.0.9 / 6.2.x < 6.2.2 URL Redirection Vulnerability (FG-IR-19-179)

The remote host is running a version of FortiOS 5.x greater than or equal to 5.4.0, 6.x prior to 6.0.9, or 6.2.x prior to 6.2.2. It is, therefore, affected by a URL redirection vulnerability due to an input-validation flaw related to the admin password change page. C Tenable Network Security, Inc...

Top 10 Most Innovative Cybersecurity Companies After RSA 2020

The RSA Conference, the world's leading information security conference and exposition, held its 29th annual event in San Francisco last week. According to the organizers, over 36,000 attendees, 704 speakers, and 658 exhibitors gathered at the Moscone Center to discuss privacy, Machine Learning,...

WordPress Envira Photo Gallery plugin <= 1.7.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Envira Photo Gallery plugin versions = 1.7.6. Solution Update the WordPress Envira Photo Gallery plugin to the latest available version at least 1.7.7...

Fortinet FortiOS Redirection Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

WordPress Modula Image Gallery plugin <= 2.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Modula Image Gallery plugin versions = 2.2.4. Solution Update the WordPress Modula Image Gallery plugin to the latest available version at least 2.2.5...

Exploit for SQL Injection in Imagely Nextgen_Gallery

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authent...

CVE-2019-5593

Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded...