3222 matches found
CVE-2023-22641
CVE-2023-22641 is an Open Redirect vulnerability in Fortinet FortiOS and FortiProxy. Affected products and versions include FortiOS 7.2.0–7.2.3, 7.0.0–7.0.9, 6.4.0–6.4.12, 6.2.x, 6.0.x, and FortiProxy 7.2.0–7.2.2, 7.0.0–7.0.8, and all 2.0/1.2/1.1/1.0 series. The issue enables an authenticated att...
CVE-2022-41330
CVE-2022-41330 is an HTML/URL input handling flaw (Cross-site Scripting) in Fortinet FortiOS and FortiProxy. Affected: FortiOS 7.2.0–7.2.3, 7.0.0–7.0.9, 6.4.0–6.4.11 and prior to 6.2.12; FortiProxy 7.2.0–7.2.1 and prior to 7.0.7. Root cause: improper neutralization of input during web page genera...
CVE-2022-41330
An improper neutralization of input during web page generation vulnerability 'Cross-site Scripting' CWE-79 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allow...
CVE-2022-41330
An improper neutralization of input during web page generation vulnerability 'Cross-site Scripting' CWE-79 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9, version 6.4.0 through 6.4.11 and before 6.2.12 and FortiProxy version 7.2.0 through 7.2.1 and before 7.0.7 allow...
PT-2023-7425 · Fortinet · Fortiproxy +1
Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.0 through 7.2.3 FortiOS versions prior to 7.0.10 FortiProxy versions 7.2.0 through 7.2.2 FortiProxy versions prior to 7.0.8 Description: The issue is related to an improper restriction of excessive authentication attempts...
Fortinet FortiOS 跨站脚本漏洞
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering, and anti-spam. A security...
Fortinet FortiOS 输入验证错误漏洞
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...
Fortinet FortiOS 安全漏洞
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...
Open redirect in sslvpnd
...
Anti brute-force bypass in administrative interface
...
Cross Site Scripting vulnerabilities in administrative interface
...
Fortinet 7.2.1 Authentication Bypass
Exploit Title: Fortinet Authentication Bypass v7.2.1 - FortiOS, FortiProxy, FortiSwitchManager Date: 13/10/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.fortinet.com/ Version: FortiOS from 7.2.0 to 7.2.1 FortiOS from 7.0.0 to 7.0.6 FortiProxy 7.2.0 FortiProxy from...
FortiOS FortiProxy FortiSwitchManager v7.2.1 - Authentication Bypass Vulnerability
Exploit Title: Fortinet Authentication Bypass v7.2.1 - FortiOS, FortiProxy, FortiSwitchManager Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.fortinet.com/ Version: FortiOS from 7.2.0 to 7.2.1 FortiOS from 7.0.0 to 7.0.6 FortiProxy 7.2.0 FortiProxy from 7.0.0 to 7.0.6...
FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass
Exploit Title: Fortinet Authentication Bypass v7.2.1 - FortiOS, FortiProxy, FortiSwitchManager Date: 13/10/2022 Exploit Author: Felipe Alcantara Filiplain Vendor Homepage: https://www.fortinet.com/ Version: FortiOS from 7.2.0 to 7.2.1 FortiOS from 7.0.0 to 7.0.6 FortiProxy 7.2.0 FortiProxy from...
Exploit for Out-of-bounds Write in Fortinet Fortios
CVE-2022-42475-RCE-POC Vulnerability Name CVE-2022-4247...
Exploit for Out-of-bounds Write in Fortinet Fortios
CVE-2022-42475-RCE-POC Vulnerability Name CVE-2022-4247...
The vulnerability of the SSL-VPN portal for operating systems FortiOS and the proxy server used for protecting against internet attacks by FortiProxy allows attackers to induce a service failure.
The vulnerability of the SSL-VPN portal for FortiOS operating systems and the FortiProxy proxy server used to protect against internet attacks is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a...
The vulnerability of the administration interface of FortiOS operating systems and the FortiProxy proxy server, which allows attackers to gain unauthorized access to protected information.
The vulnerability of the administrative interface of FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...
Exploit for Out-of-bounds Write in Fortinet Fortios
cve-2022-42475 POC code to exploit the Heap overflow in Fortin...
The vulnerability of the Virtual Domains (VDOM) virtualization technology in operating systems FortiOS and proxy servers for protecting against Internet attacks by FortiProxy allows attackers to increase their privileges.
The vulnerability of the Virtual Domains VDOM virtualization technology in operating systems FortiOS and proxy servers for protecting against Internet attacks via FortiProxy is related to errors in processing relative path operations to directories. Exploiting this vulnerability can allow attacke...