Lucene search
+L

3567 matches found

Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•15 views

PT-2025-41946

Name of the Vulnerable Software and Affected Versions Fortinet FortiSRA versions 1.0.0 through 1.5.0 Fortinet FortiPAM versions 1.0.0 through 1.5.0 Fortinet FortiProxy versions 7.4.0 through 7.6.1 Fortinet FortiOS versions 7.0.2 through 7.6.2 Fortinet FortiSwitchManager versions 7.2.1 through 7.2...

9CVSS7.6AI score0.00556EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•1 views

CVE-2025-31514: Insertion of Sensitive Information into Log File

A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all...

4.3CVSS5.7AI score0.00361EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/14 12:00 a.m.•18 views

Fortinet Fortigate Insufficient Session Expiration in SSLVPN using SAML authentication (FG-IR-24-487)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-487 advisory. - An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2... CVE-2025-25252 Note that...

6.5CVSS5.5AI score0.00337EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•14 views

The vulnerability of FortiWeb web applications’ network firewalls, FortiOS operating systems, and FortiProxy proxy servers related to privilege management errors allows attackers to escalate their privileges.

The vulnerability of FortiWeb web applications’ firewalls, FortiOS operating systems, and FortiProxy proxy servers for protecting against Internet attacks is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

7.1CVSS5.7AI score0.00849EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•15 views

Vulnerability of Fortinet FortiOS operating system graphical interfaces and FortiProxy proxy servers, which allow attackers to carry out “man-in-the-middle” attacks.

The vulnerability of Fortinet FortiOS operating systems’ graphical interfaces, as well as the FortiProxy proxy server used for protecting against internet attacks, is related to access from a point that is not a final destination. Exploiting this vulnerability allows a remote attacker to carry ou...

5.9CVSS5.8AI score0.00446EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•12 views

The vulnerability of the FortiPAM account management system and the FortiOS GUI component, related to improper handling of insufficient permissions or privileges, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the FortiPAM account management system and the FortiOS GUI component is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information throug...

6.5CVSS5.8AI score0.00371EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•15 views

The vulnerability of FortiOS operating systems and FortiProxy proxy servers related to incomplete cleanup of temporary or auxiliary resources allows attackers to increase their privileges.

The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protection against Internet attacks is related to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow attackers to increase their privileges...

3.2CVSS5.8AI score0.00211EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•15 views

The vulnerability of the SSL-VPN technology for FortiOS operating systems allows a hacker to bypass the authentication process.

The vulnerability of the SSL-VPN technology for FortiOS operating systems is related to incorrect session expiration times. Exploiting this vulnerability allows a malicious actor to bypass authentication processes remotely...

4.8CVSS5.7AI score0.0115EPSS
SaveExploits3References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•13 views

The vulnerability of FortiOS operating systems arises from insufficient restrictions on communication channels for specified endpoints, allowing attackers to implement unauthorized sessions.

The vulnerability of the FortiOS operating systems is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability allows a malicious actor to establish unauthorized sessions through created session synchronization packages of the FGSP...

3.1CVSS5.8AI score0.00402EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•22 views

The vulnerability of the FortiOS graphical interface and the scalable cloud security system FortiSASE, related to insufficient protection of operational data, allows attackers to gain full access to SSL-VPN settings.

The vulnerability of the FortiOS graphical interface and the scalable cloud security system FortiSASE is related to insufficient protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to SSL-VPN settings through a specially...

4.3CVSS5.8AI score0.00536EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/10/09 12:00 a.m.•14 views

The vulnerability of the FortiOS graphical interface and the scalable cloud-based security system FortiSASE allows a attacker to gain unauthorized access to the system.

The vulnerability of the FortiOS graphical interface and the scalable cloud-based security system FortiSASE is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system...

6.8CVSS5.8AI score0.00373EPSS
SaveExploits0References4Affected Software2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2016-4987

Malware in sbrugna...

6.1CVSS6.3AI score0.05937EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2014-2256

Malware in sbrugna...

7.5CVSS6.4AI score0.05143EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2017-5695

Malware in sbrugna...

5.3CVSS5.6AI score0.01338EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2012-0964

Malware in sbrugna...

6.1CVSS6.3AI score0.0138EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-5327

Malware in sbrugna...

6.5CVSS6.7AI score0.33647EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-27795

Malware in sbrugna...

6.5CVSS6.4AI score0.00576EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-5310

Malware in sbrugna...

5.3CVSS5.5AI score0.0087EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2017-16710

Malware in sbrugna...

5.4CVSS5.5AI score0.00787EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-20789

Malware in sbrugna...

5.9CVSS5.9AI score0.01124EPSS
SaveExploits0References4
Rows per page
Query Builder