3574 matches found
Fortinet Fortigate Insufficient Session Expiration in SSLVPN using SAML authentication (FG-IR-24-487)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-487 advisory. - An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2... CVE-2025-25252 Note that...
PT-2025-41949
Name of the Vulnerable Software and Affected Versions FortiProxy versions 7.0.1 through 7.0.21 FortiProxy versions 7.2 all versions FortiProxy versions 7.4 all versions FortiProxy versions 7.6.0 through 7.6.3 Description An improperly implemented security check may allow an authenticated proxy us...
PT-2025-41946
Name of the Vulnerable Software and Affected Versions Fortinet FortiSRA versions 1.0.0 through 1.5.0 Fortinet FortiPAM versions 1.0.0 through 1.5.0 Fortinet FortiProxy versions 7.4.0 through 7.6.1 Fortinet FortiOS versions 7.0.2 through 7.6.2 Fortinet FortiSwitchManager versions 7.2.1 through 7.2...
Fortinet FortiOS和Fortinet FortiProxy 安全漏洞
Fortinet FortiOS and Fortinet FortiProxy are both products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content...
Insertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon
...
The vulnerability of FortiWeb web applications’ network firewalls, FortiOS operating systems, and FortiProxy proxy servers related to privilege management errors allows attackers to escalate their privileges.
The vulnerability of FortiWeb web applications’ firewalls, FortiOS operating systems, and FortiProxy proxy servers for protecting against Internet attacks is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Vulnerability of Fortinet FortiOS operating system graphical interfaces and FortiProxy proxy servers, which allow attackers to carry out “man-in-the-middle” attacks.
The vulnerability of Fortinet FortiOS operating systems’ graphical interfaces, as well as the FortiProxy proxy server used for protecting against internet attacks, is related to access from a point that is not a final destination. Exploiting this vulnerability allows a remote attacker to carry ou...
The vulnerability of the FortiPAM account management system and the FortiOS GUI component, related to improper handling of insufficient permissions or privileges, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the FortiPAM account management system and the FortiOS GUI component is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information throug...
The vulnerability of FortiOS operating systems and FortiProxy proxy servers related to incomplete cleanup of temporary or auxiliary resources allows attackers to increase their privileges.
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protection against Internet attacks is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the SSL-VPN technology for FortiOS operating systems allows a hacker to bypass the authentication process.
The vulnerability of the SSL-VPN technology for FortiOS operating systems is related to incorrect session expiration times. Exploiting this vulnerability allows a malicious actor to bypass authentication processes remotely...
The vulnerability of the FortiOS graphical interface and the scalable cloud-based security system FortiSASE allows a attacker to gain unauthorized access to the system.
The vulnerability of the FortiOS graphical interface and the scalable cloud-based security system FortiSASE is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system...
The vulnerability of FortiOS operating systems arises from insufficient restrictions on communication channels for specified endpoints, allowing attackers to implement unauthorized sessions.
The vulnerability of the FortiOS operating systems is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability allows a malicious actor to establish unauthorized sessions through created session synchronization packages of the FGSP...
The vulnerability of the FortiOS graphical interface and the scalable cloud security system FortiSASE, related to insufficient protection of operational data, allows attackers to gain full access to SSL-VPN settings.
The vulnerability of the FortiOS graphical interface and the scalable cloud security system FortiSASE is related to insufficient protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to SSL-VPN settings through a specially...
EUVD-2012-0964
Malware in sbrugna...
EUVD-2013-4460
Malware in sbrugna...
EUVD-2016-4987
Malware in sbrugna...
EUVD-2017-5695
Malware in sbrugna...
EUVD-2017-12273
Malware in sbrugna...