Lucene search
K

4 matches found

BDU FSTEC
BDU FSTEC
added 2023/03/09 12:0 a.m.1 views

The vulnerability in the web interface of the FortiOS operating system and the proxy server for protecting against Internet attacks, FortiProxy, allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for operating system management software FortiOS, as well as in the proxy server used for protecting against Internet attacks FortiProxy, is related to the possibility of buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to...

10CVSS0.17237EPSS
Exploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.1 views

The vulnerabilities in the web interface of FortiOS, the local software product FortiSwitch Manager, and the proxy server FortiProxy, designed for protecting against internet attacks, allow attackers to read and write files on a basic Linux system.

The vulnerability in the web interface of FortiOS operating systems, the local software management platform FortiSwitch Manager, and the proxy server for internet attack protection, FortiProxy, is related to errors in processing the relative path to the directory. Exploiting this vulnerability...

9CVSS0.00302EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.0 views

The vulnerability in the FortiOS operating system’s web interface allows a hacker to perform cross-site fraudulently.

The vulnerability in the FortiOS operating system’s web interface is related to the lack of authentication for requests. Exploiting this vulnerability allows a malicious actor to perform cross-site forgery of requests to pages like /logindisconnect/disconnectadmins or...

5.8CVSS5.3AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/31 12:0 a.m.1 views

The vulnerability in the FortiOS operating system’s web interface allows a hacker to inject any desired JavaScript or HTML code.

The vulnerability in the FortiOS operating system’s web interface stems from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code during the activation of FortiToken using the “action” parameter...

6.1CVSS5.7AI score0.02943EPSS
Exploits5References4Affected Software1
Rows per page
Query Builder