Lucene search
+L

27 matches found

CNNVD
CNNVD
added 2025/06/10 12:00 a.m.13 views

Fortinet FortiPAM 安全漏洞

Fortinet FortiPAM is a platform for privilege access control from Fortinet, Inc. A security vulnerability exists in Fortinet FortiPAM versions 1.4.1 and earlier, 1.3.0, 1.2.0, 1.1.2 and earlier, 1.0.3 and earlier, and FortiSRA 1.4.1 and earlier, which stems from improper handling of permissions a...

8.8CVSS6.7AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.17 views

PT-2025-24715 · Fortinet · Fortipam +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiPAM versions 1.0.0 through 1.4.1 Fortinet FortiSRA versions 1.4.0 through 1.4.1 Description: The issue is related to improper handling of insufficient permissions or privileges, allowing for improper access control via specially...

8.8CVSS6.4AI score0.00371EPSS
SaveExploits0References3
NCSC
NCSC
added 2025/05/14 8:41 a.m.19 views

Vulnerabilities fixed in Fortinet products

Fortinet has fixed vulnerabilities in FortiManager, FortiManager Cloud, FortiAnalyzer, FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiSwitchManager and FortiWeb. The vulnerabilities include an OS Command Injection that allows local attackers to execute unauthorized code by manipulating CLI command...

9.8CVSS8.1AI score0.99506EPSS
SaveExploits81References9
RedhatCVE
RedhatCVE
added 2025/03/15 6:14 a.m.27 views

CVE-2024-45324

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0...

7.2CVSS7.3AI score0.00715EPSS
SaveExploits0References1
NCSC
NCSC
added 2025/03/12 10:46 a.m.17 views

Fixed vulnerabilities in FortiOS, FortiProxy, FortiPAM, FortiSRA and FortiWeb.

Fortinet has fixed a vulnerability in FortiOS, FortiProxy, FortiPAM, FortiSRA and FortiWeb. The vulnerability is in how certain Fortinet products handle HTTP and HTTPS requests. A malicious party with certain privileges can send specially crafted requests that lead to the execution of unauthorize...

8.6CVSS6.8AI score0.00715EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/11 3:15 p.m.6 views

CVE-2024-45324

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and before 7.0.19, FortiPAM version 1.4.0...

7.2CVSS5.9AI score0.00715EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.13 views

Fortinet FortiOS 格式化字符串错误漏洞

Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform from the American company Fiat Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering, and antispam. A...

7.2CVSS6.6AI score0.00715EPSS
SaveExploits0References3
Rows per page
Query Builder