CVE-2017-7731

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature...

CVE-2017-7731

A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature...

Fortinet FortiOS 5.0.x / 5.2.x < 5.2.11 'global-label' Parameter XSS (FG-IR-17-057)

The version of Fortinet FortiOS running on the remote device is 5.0.x or 5.2.x prior to 5.2.11. It is, therefore, affected by a stored cross-site scripting XSS vulnerability due to improper validation of user-supplied input to the 'global-label' parameter. An authenticated, remote attacker can...

Fortinet FortiWLC-SD Elevation of Privilege Vulnerability

Fortinet FortiWLC-SD is an unlimited router product from Fortinet. An elevation of privilege vulnerability exists in Fortinet FortiWLC-SD. An attacker can exploit this vulnerability to gain root privileges...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

Cross site scripting

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...

CVE-2017-3128

Fortinet FortiOS is affected by a stored XSS vulnerability in the policy global-label parameter. Root cause: improper validation of user-supplied input. Affected versions are FortiOS 5.0.x and 5.2.x prior to 5.2.11. Exploitation requires authentication and privileges; an attacker with write privi...

Schneider Electric VAMPSET

CVSS v3 5.6 ATTENTION: Low skill level to exploit. Vendor: Schneider Electric Equipment: VAMPSET Vulnerability: Memory Corruption AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following VAMPSET setting and configuration software products: VAMPSET, versions prior ...

FortiPortal Multiple Vulnerabilities

Multiple vulnerabilities impacting FortiPortal were disclosed to Fortinet with details as follows:...

Fortinet FortiGate/FortiOS Cross-Site Scripting Vulnerability

Fortinet FortiGate is a network security platform developed by Fortinet. The platform provides firewall, antivirus and intrusion prevention IPS, application control, anti-spam, wireless controller and WAN acceleration, etc. Fortinet FortiOS is a set of security operating system developed by...

Fortinet FortiOS 5.2.x < 5.2.11 srcintf XSS (FG-IR-17-017)

The version of Fortinet FortiOS running on the remote FortiGate device is 5.2.x prior to 5.2.11. It is, therefore, affected by a cross-site scripting XSS vulnerability when creating firewall policies due to improper validation of input related to srcintf before returning it to users. An...

Fortinet FortiMail Cross-Site Scripting Vulnerability (CNVD-2017-04565)

Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. A cross-site scripting vulnerability exists in Fortinet FortiMail that stems from a failure to properly filter user-supplied...

FortiClient SSLVPN Privilege Elevation Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in FortiClient SSLVPN. An attacker can exploit this vulnerability to gain root privileges...

Fortinet FortiOS SSH Undocumented Interactive Login Vulnerability (FG-IR-16-001) (SSH) - Active Check

An undocumented account used for communication with authorized FortiManager devices exists on some versions of FortiOS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fortinet Fortigate Certificate Detection

Binary data 700048.prm...

CVE-2016-7542

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes not including super-admins stored on the appliance via the webui REST API, and may therefore be able to crack them...

Design/Logic Flaw

A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write administrators password hashes not including super-admins stored on the appliance via the webui REST API, and may therefore be able to crack them...