6560 matches found
CVE-2018-9186
A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...
CVE-2018-9186
A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...
CVE-2018-9186
Fortinet FortiAuthenticator is affected in versions 4.0.0 through
CVE-2018-9186: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to before 5.3.0 "CSRF validation failure" page allows attacker to execute unauthorized script code via inject malicious scripts in HTTP referer header...
PT-2018-18910
Name of the Vulnerable Software and Affected Versions Fortinet FortiAuthenticator versions 4.0.0 through 5.3.0 Description A cross-site scripting XSS issue exists due to a CSRF validation failure, allowing an attacker to execute unauthorized script code by injecting malicious scripts in the HTTP...
CVE-2017-14185
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information eg:addresses via specifically crafted URLs inside the SSL-VPN web portal...
Information disclosure
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information eg:addresses via specifically crafted URLs inside the SSL-VPN web portal...
CVE-2017-14185
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information eg:addresses via specifically crafted URLs inside the SSL-VPN web portal...
CVE-2017-14185
Fortinet FortiOS contains an information disclosure vulnerability (CVE-2017-14185) affecting FortiOS 5.6.0–5.6.2, 5.4.0–5.4.8, and 5.2 (all versions). The issue allows SSL VPN web portal users to access internal FortiOS configuration information (e.g., addresses) via specially crafted URLs within...
CVE-2017-14185
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information eg:addresses via specifically crafted URLs inside the SSL-VPN web portal...
CVE-2017-14185: Exposure of Sensitive Information to an Unauthorized Actor
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information eg:addresses via specifically crafted URLs inside the SSL-VPN web portal...
Fortinet FortiOS Local Elevation of Privilege Vulnerability (CNVD-2018-10482)
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, anti-virus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security...
Remote code execution
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary progra...
CVE-2017-14187
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary progra...
CVE-2017-14187
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary progra...
CVE-2017-14187
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary progra...
CVE-2017-14187
Fortinet FortiOS contains a local privilege escalation/remote code execution vulnerability (CVE-2017-14187) affecting FortiOS 5.6.0–5.6.2, 5.4.0–5.4.8, and 5.2 and earlier. An admin user with super_admin privileges can abuse a FortiGate USB device by linking an arbitrary binary on the USB drive t...
Fortinet FortiOS Local Elevation of Privilege Vulnerability
Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A local elevatio...