CVE-2016-3196

CVE-2016-3196 is a stored XSS in Fortinet FortiAnalyzer and FortiManager where remote authenticated users can inject HTML/JS via an image filename uploaded in reports. Affected: FortiAnalyzer 5.x before 5.0.12 and 5.x in 5.2.x before 5.2.6; FortiManager 5.x before 5.0.12 and 5.x in 5.2.x before 5...

FortiManager Malicious Script Insertion

Document Title: =============== FortiManager Series - Bookmark Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1685 Fortinet PSIRT ID: 1624461 Release Notes 1:...

FortiManager (Series) - Persistent Bookmark Vulnerability

Document Title: =============== FortiManager Series - Persistent Bookmark Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1685 Fortinet PSIRT ID: 1624461 Bulletin:...

FortiAnalyzer & FortiManager - CS Cross Site Vulnerability

Document Title: =============== FortiAnalyzer & FortiManager - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1686 Fortinet PSIRT ID: 1624489 Bulletin:...

FortiManager (Series) - Multiple Web Vulnerabilities

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Bulletin:...

FortiManager Script Insertion

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Release Notes 1:...

FortiAnalyzer & FortiManager - CS Cross Site Vulnerability

Document Title: =============== FortiAnalyzer & FortiManager - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1686 Fortinet PSIRT ID: 1624489 Bulletin:...

FortiManager & FortiAnalyzer - Persistent Vulnerability

Document Title: =============== FortiManager & FortiAnalyzer - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1687 Fortinet PSIRT ID: 1624561 Bulletin:...

FortiManager (Series) - Multiple Web Vulnerabilities

Document Title: =============== FortiManager Series - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1684 Fortinet PSIRT ID: 1624459 Bulletin:...

FortiManager & FortiAnalyzer - Persistent Vulnerability

Document Title: =============== FortiManager & FortiAnalyzer - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1687 Fortinet PSIRT ID: 1624561 Bulletin:...

Fortinet FortiAnalyzer Persistent XSS Vulnerability (FG-IR-16-014)

Fortinet FortiAnalyzer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fortinet FortiManager Persistent XSS Vulnerability (FG-IR-16-014)

Fortinet FortiManager is prone to a cross-site-scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-5092

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

CVE-2016-4066

Cross-site request forgery CSRF vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors...

CVE-2016-5092

Fortinet FortiWeb is affected by CVE-2016-5092 (path traversal) where authenticated administrators with read/write privileges can read arbitrary files via the autolearn feature. The vulnerability exists in FortiWeb versions before 5.5.3. Reported by NVD with CVSS v2 base 4.0 (NETWORK, LOW complex...

CVE-2016-4066

Fortinet FortiWeb is affected by a CSRF vulnerability (CVE-2016-4066) that allows an attacker to change administrator passwords by triggering crafted requests. The vulnerability is documented in Fortinet advisories and common CVE records, indicating impact on FortiWeb versions prior to 5.5.3. The...

CVE-2016-5092

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

CVE-2016-4066

Cross-site request forgery CSRF vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrators for requests that change the password via unspecified vectors...