CVE-2014-8618

FortiADC D models prior to version 4.2 are affected by a cross-site scripting (XSS) vulnerability in the theme login page. The issue arises from improper validation of user-supplied input and can allow remote attackers to execute arbitrary script in a user’s browser via unspecified vectors. Remed...

CVE-2014-8616

Fortinet FortiOS 5.2.x is affected by CVE-2014-8616 (and related CVE-2015-1880) due to multiple cross-site scripting vulnerabilities. Affected versions are FortiOS before 5.2.3. Exploitation occurs via crafted requests to vulnerable surfaces (notably the user group and VPN template menus, and the...

CVE-2014-8618

Cross-site scripting XSS vulnerability in the theme login page in Fortinet FortiADC D models before 4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8619

Cross-site scripting XSS vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3620

Cross-site scripting XSS vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-1880

Cross-site scripting XSS vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability

Document Title: =============== Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSI...

Fortinet Single Sign On Hello Message Multiple Vulnerabilities - ver 2 (CVE-2015-2281)

Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...

Fortinet FortiADC sslvpn login page cross-site scripting vulnerability

Fortinet FortiADC is a load balancing service solution. A cross-site scripting vulnerability exists in the Fortinet FortiADC sslvpn login page, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive...

Fortinet FortiAnalyzer / FortiManager Cross Site Scripting

Document Title: =============== Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSI...

Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability

Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...

Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability

Document Title: =============== Fortinet FortiAnalyzer&FortiManager - XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1354 Security Bulletin FortiGuard: http://www.fortiguard.com/advisory/FG-IR-15-005/ PSIRT ID: 1327458...

Fortinet Single Sign On Hello Message Multiple Vulnerabilities (CVE-2015-2281)

Multiple Vulnerabilities exists in Fortinet Single Sign On FSSO. The vulnerabilities are due to a lack of adequate validation of user supplied input when processing HELLO messages. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a specially crafted HELLO message ...

Fortinet FortiMail Server Detection via HTTP

Binary data 8737.prm...

Fortinet FortiMail Server Detection via SSL/TLS

Binary data 8736.prm...

Fortinet FortiMail Server Detection via SMTP

Binary data 8731.prm...

Fortinet FortiMail Server Detection via IMAPS

Binary data 8735.prm...

Fortinet FortiMail Server Detection via POP3

Binary data 8730.prm...

Fortinet FortiWeb < 5.3.5 Multiple Vulnerabilities

The remote host running a version of FortiWeb prior to 5.3.5. It is, therefore, affected by multiple vulnerabilities : - A command injection vulnerability exists due to a flaw that occurs when an administrator is executing reports. An authenticated, remote attacker can exploit this to execute...

Fortinet FortiMail < 5.0.9 / 5.1.6 / 5.2.4 HTTP Debug Information Disclosure

The remote host is running a version of FortiMail that is prior to 5.0.9 / 5.1.6 / 5.2.4. It is, therefore, affected by an information disclosure vulnerability due to HTTP debug commands improperly dumping user credentials in the debug logs. This allows a remote, authenticated attacker to disclos...