Fortinet FortiGate XSS Vulnerability (FG-IR-14-003)

FortiOS as used in FortiGate is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fortinet FortiGate Detection (SSH Login)

SSH login-based detection of Fortinet FortiGate. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fortinet FortiOS HTML Injection Vulnerability

Fortinet FortiOS is a set of security operating system developed by the U.S. company Fita Fortinet dedicated to the FortiGate platform, which provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering, anti-spam and other security features. An HTML injection vulnerability exist...

Fortinet FortiOS Denial Of Service / Man-In-The-Middle

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Fortinet FortiOS Multiple Vulnerabilities Affected Versions: Verified on FortiOS Firmware v5.0,build4457 GA Patch 7 PDF:...

CVE-2014-8730 "Poodle for TLS" vulnerability

All versions of Fortigate VM, FortiOS 5.4 branch, FortiOS 5.6 branch and next releases are not vulnerable...

FortiGate Vulnerabilities in FortiManager Service

...

Fortinet Fortigate CRLF Characters URL Filtering Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27276/info Fortinet Fortigate is prone to a vulnerability that can allow attackers to bypass the device's URL filtering. An attacker can exploit this issue to view unauthorized websites, bypassing certain security...

Fortinet FortiGate 2.x/3.0 URL Filtering Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16599/info Fortinet FortiGate is prone to a vulnerability that could allow users to bypass the device's URL filtering. FortiGate devices running FortiOS v2.8MR10 and v3beta are vulnerable to this issue. Other versions may...

FortiGate Firewall 2.x Policy Admin Interface XSS

No description provided by source. source: http://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious...

Fortigate Firewalls - CSRF Vulnerability

No description provided by source. Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version: 4.3.13 & 5.0.2 Description ========== Because many functions are not protected by...

FortiGate Firewall 2.x dlg Admin Interface XSS

No description provided by source. source: http://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious...

FortiGate Firewall 2.x listdel Admin Interface XSS

No description provided by source. source: http://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious...

Fortigate UTM WAF Appliance Multiple Vulnerabilities

No description provided by source...

FortiGate Firewall 2.x selector Admin Interface XSS

No description provided by source. source: http://www.securityfocus.com/bid/9033/info Multiple cross-site scripting vulnerabilities have been reported in the FortiGate Firewall web administrative interface. These issues could be exploited by enticing an administrative user to follow a malicious...

Fortinet Fortiweb HTML注入漏洞(CVE-2014-1458)

BUGTRAQ ID: 65354 CVECAN ID: CVE-2014-1458 FortiGate系列安全产品可检测和消除网络威胁。 Fortinet Fortiweb 5.0.3及其他版本的Web管理接口存在跨站脚本漏洞，可使经过身份验证的远程管理员注入任意Web脚本或HTML。 0 Fortinet FortiWeb 5.0.3 厂商补丁： Fortinet -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.fortinetfirewall.com/index.php...

FortiGate Cross-Site Scripting Vulnerability

...

Fortigate FortiOS Compliance Checks

Binary data fortigatecompliancecheck.nbin...

CVE-2013-1414

Multiple cross-site request forgery CSRF vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify 1 settings or 2 policies, or 3 restart the device via a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify 1 settings or 2 policies, or 3 restart the device via a...

CVE-2013-1414

Multiple cross-site request forgery CSRF vulnerabilities in Fortinet FortiOS on FortiGate firewall devices before 4.3.13 and 5.x before 5.0.2 allow remote attackers to hijack the authentication of administrators for requests that modify 1 settings or 2 policies, or 3 restart the device via a...