6065 matches found
CVE-2023-37935
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services...
CVE-2023-37935
Fortinet FortiOS SSL VPN contains CVE-2023-37935: a vulnerability where GET requests with sensitive query strings can expose plaintext passwords for remote services (e.g., RDP/VNC). Affected: FortiOS versions 7.0.0–7.0.12, 7.2.0–7.2.5, and 7.4.0. Root cause: GET request handling allows leakage of...
CVE-2023-36548
Fortinet FortiWLM is affected by an OS command injection due to improper neutralization of special elements in HTTP GET request parameters. Affects FortiWLM versions 8.5.0–8.5.4 and 8.6.0–8.6.5. The root cause is improper handling of input that leads to remote code execution with network access. ...
CVE-2023-36548
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36548
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36547
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36547
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36547
Fortinet FortiWLM is affected by CVE-2023-36547 through OS command injection in FortiWLM 8.6.0–8.6.5 and 8.5.0–8.5.4. The root cause is improper neutralization of special elements in HTTP GET parameters, enabling an attacker to execute arbitrary code or commands. Functionally, impact is high (una...
CVE-2023-34993
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-34993
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-34993
Fortinet FortiWLM is affected by an OS command injection in FortiWLM 8.6.0–8.6.5 and 8.5.0–8.5.4 due to improper neutralization of command elements. An unauthenticated attacker can remotely execute arbitrary commands by crafting specific HTTP GET parameters, potentially bypassing authentication a...
CVE-2023-36550
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36550
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36550
CVE-2023-36550 describes an OS command injection in Fortinet FortiWLM. Affected: FortiWLM 8.6.0–8.6.5 and 8.5.0–8.5.4. Root cause: improper neutralization of special elements in os command handling, enabling an attacker to run arbitrary commands by sending specially crafted HTTP GET parameters. I...
CVE-2023-36549
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-36549
Fortinet FortiWLM contains an os command injection in FortiWLM 8.5.0–8.5.4 and 8.6.0–8.6.5 due to improper neutralization of special elements in HTTP GET parameters. This allows an attacker to execute arbitrary commands over the network with high impact (CVE-2023-36549). Remediation/status detail...
CVE-2023-36549
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters...
CVE-2023-34989
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...
CVE-2023-34989
Fortinet FortiWLM contains an OS command injection vulnerability (CVE-2023-34989) in FortiWLM versions 8.6.0–8.6.5 and 8.5.0–8.5.4. The flaw arises from improper neutralization of special elements in HTTP GET parameters, allowing an attacker to execute arbitrary code or commands remotely. CVSS v3...
CVE-2023-34989
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted HTTP get request parameters...