6560 matches found
CVE-2017-7734
CVE-2017-7734 is a Fortinet FortiOS XSS vulnerability affecting FortiOS 5.4.0–5.4.4, enabling an authenticated attacker to execute script code via the Comments field during Config Revisions save due to improper input validation. Connected sources corroborate the same description across NVD/NVD mi...
CVE-2017-3133
Fortinet FortiOS
CVE-2017-7734
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions...
CVE-2017-7735
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via the "Groups" input while creating or editing User Groups...
CVE-2017-3131
CVE-2017-3131 : Fortinet FortiOS versions 5.4.0–5.4.4 and 5.6.0 are affected by a cross‑site scripting (XSS) vulnerability in the FortiView Applications filter input, allowing an attacker to execute arbitrary JavaScript. The issue is tied to FortiOS’s FortiView FortiView filter handling and is ev...
CVE-2017-3132
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken...
CVE-2017-3132
CVE-2017-3132 is a Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier, exploitable via the action input during FortiToken activation. The NVD record lists CVSS 3.0 base score 6.1 (network, low attack complexity, user interaction required) and notes partial integrity...
Command injection
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands...
CVE-2015-3617
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands...
CVE-2015-3617
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands...
CVE-2015-3617
The CVE-2015-3617 entry applies to Fortinet FortiManager, specifically FortiManager 5.0 prior to 5.0.11 and 5.2 prior to 5.2.2. The vulnerability is an Elevation of Privilege via specially crafted CLI commands that allow a local attacker to gain higher privileges within FortiManager. The connecte...
CVE-2015-3617: Undefined Security Weakness
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands...
PT-2017-6681
Name of the Vulnerable Software and Affected Versions Fortinet FortiManager versions 5.0 through 5.0.10 Fortinet FortiManager versions 5.2 through 5.2.1 Description The issue allows local users to gain privileges via crafted CLI commands. Recommendations For Fortinet FortiManager versions 5.0...
Fortinet FortiManager Information Disclosure Vulnerability
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...
Fortinet FortiManager Cross-Site Scripting Vulnerability (CNVD-2017-237899)
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOM to further simplify multi-device security deployment and managemen...
fortinet.com XSS vulnerability
Vulnerable URL: https://www.fortinet.com/search.html?q=%27%22%3E%3Csvg%2Fonload%3Dprompt%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12630 VIP website status:| Yes Coordinated Disclosure...
Design/Logic Flaw
Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation attack...
Sql injection
SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters...