3222 matches found
Fortinet Fortigate -resources CLI command (FG-IR-22-463)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-463 advisory. - A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0,...
Lack of certificate verification when establishing secure connections
...
SMTP password ciphertext exposure in Log
...
Null pointer dereference in sslvnd
...
Heap buffer overflow in sslvpn pre-authentication
...
Fortinet Fortigate Read Only administrator can intercept sensitive data (FG-IR-22-380)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-380 advisory. - A cleartext transmission of sensitive information vulnerability CWE-319 in Fortinet FortiOS version 7.2.0 through 7.2.4,...
Fortinet Fortigate - SMTP password ciphertext exposure in Log (FG-IR-22-455)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-455 advisory. - An insertion of sensitive information into log file vulnerability CWE-532 in FortiOS / FortiProxy log events may allow a...
Fortinet Fortigate Out-of-bound write in CLI (FG-IR-22-494)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-494 advisory. - A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS versio...
Fortinet Fortigate DoS in firmware upgrade function (FG-IR-22-375)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-375 advisory. - A loop with unreachable exit condition 'infinite loop' in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0...
Fortinet Fortigate Path traversal vulnerability in administrative interface (FG-IR-22-393)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-393 advisory. - A relative path traversal vulnerability CWE-23 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9...
PT-2023-3237 · Fortinet · Fortiproxy +2
Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0 through 7.2.4 FortiProxy versions 1.0 through 7.2.3 FortiWeb versions 6.3 through 7.2.1 Description: The issue is related to a loop with an unreachable exit condition, also known as an 'infinite loop', which can be...
Out-of-bound write in CLI
...
Read Only administrator can intercept sensitive data
...
Fortinet FortiWeb DoS in firmware upgrade function (FG-IR-22-375)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-375 advisory. - A loop with unreachable exit condition 'infinite loop' in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS version 7.0....
Access of uninitialized pointer in administrative interface API
...
Format String Bug in Fclicense daemon
...
PT-2023-3229 · Fortinet · Fortiproxy +1
Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.4.0 through 6.4.12 Fortinet FortiOS versions 7.0.0 through 7.0.11 Fortinet FortiOS versions 7.2.0 through 7.2.4 Fortiproxy versions 7.0.0 through 7.0.10 Fortiproxy versions 7.2.0 through 7.2.4 Description: A null...
Path traversal vulnerability in administrative interface
...
Fortinet Fortigate Access of uninitialized pointer in administrative interface API (FG-IR-23-095)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-095 advisory. - A access of uninitialized pointer vulnerability CWE-824 in Fortinet FortiProxy version 7.2.0 through 7.2.3 and before 7.0.9...
VulnCheck KEV: CVE-2023-27997
Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests...