Fortinet FortiSwitch Weak Password Vulnerability

Fortinet FortiSwitch is a suite of secure switching platforms from Fortinet, Inc. designed for Ethernet infrastructure and current network edge configurations. A weak password vulnerability exists in Fortinet FortiSwitch versions prior to 3.4.1. An attacker could exploit the vulnerability to log ...

Fortinet FortiWeb Path Traversal Vulnerability (FG-IR-16-009)

Fortinet FortiWeb is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:fortinet:fortiweb";...

Fortinet FortiWeb CSRF Vulnerability (FG-IR-16-010)

Fortinet FortiWeb is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fortinet FortiWeb Cross-Site Request Forgery Vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

Fortinet FortiSandbox跨站脚本漏洞

No description provided by source...

Fortinet FortiSandbox Cross-Site Scripting Vulnerability (CNVD-2016-03774)

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. A cross-site scripting vulnerability exists in the Web User Interface WebUI of...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

CVE-2015-7360

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

CVE-2015-7360

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

CVE-2015-7360

FortiSandbox WebUI prior to version 2.1 is vulnerable to multiple cross-site scripting (XSS) flaws. The Flaws allow remote attackers to inject arbitrary script or HTML via: (1) the serial parameter in alerts/summary/profile/; (2) the urlForCreatingReport parameter in csearch/report/export/; (3) t...

Fortinet FortiGate RSA-CRT Key Leak Vulnerability (FG-IR-16-008)

FortiOS now includes for all SSL libraries a countermeasure against Lenstra SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 24 Update: NetworkManager-fortisslvpn-1.2.0-1.fc24

This package contains software for integrating VPN capabilities with the Fortinet compatible SSLVPN server with NetworkManager...

Fortinet FortiOS Web User Interface Redirection Vulnerability

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security...

Fortinet FortiOS Multiple Vulnerabilities (FG-IR-16-003)

Fortinet FortiOS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fortinet FortiOS Redirect Parameter Multiple Vulnerabilities

The remote host is running a version of Fortinet FortiOS that is affected by the following vulnerabilities : - An open redirect vulnerability exists due to improper validation of user-supplied input before using it in redirects. An attacker can exploit this, via a specially crafted link, to...

DHCP Hostname HTML Injection

...

FortiOS open redirect vulnerability

...

Fortinet FortiOS 5.2.x < 5.2.6 ICMP Redirect Response DoS

The remote host is running a version of Fortinet FortiOS that is 5.2.x prior to 5.2.6. It is, therefore, affected by a denial of service vulnerability due to the processing of ICMP redirect packets before a session has been created. A remote attacker can exploit this to cause a kernel panic,...

Fortinet SSH Backdoor Scanner

This module scans for the Fortinet SSH backdoor. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortinet SSH Backdoor Scanner', 'Description' = %q This module scans for the Fortinet SSH...

Fortinet FortiADC Model D < 4.2 Theme Login Page XSS

The remote FortiADC Model D device is running a software version less than 4.2. It is, therefore, affected by a cross-site scripting vulnerability due to improper validation of user-supplied input to the theme login page. An attacker can exploit this, via a specially crafted request, to execute...