6013 matches found
CVE-2017-3134
CVE-2017-3134 affects Fortinet FortiWLC-SD versions 8.2.4 and earlier. The issue is a privilege-escalation flaw where an attacker with admin/superuser privileges can gain shell/root access via the CLI command ‘copy running-config’, attributed to lack of input sanitisation for that command. Connec...
CVE-2017-7343
An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...
CVE-2017-7337
An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen session and CSRF tokens or the adomName parameter in the /fpc/sec/customer/policy/getAdomVersion...
CVE-2017-7731
A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature...
Fortinet FortiOS 5.0.x / 5.2.x < 5.2.11 'global-label' Parameter XSS (FG-IR-17-057)
The version of Fortinet FortiOS running on the remote device is 5.0.x or 5.2.x prior to 5.2.11. It is, therefore, affected by a stored cross-site scripting XSS vulnerability due to improper validation of user-supplied input to the 'global-label' parameter. An authenticated, remote attacker can...
Fortinet FortiWLC-SD Elevation of Privilege Vulnerability
Fortinet FortiWLC-SD is an unlimited router product from Fortinet. An elevation of privilege vulnerability exists in Fortinet FortiWLC-SD. An attacker can exploit this vulnerability to gain root privileges...
CVE-2017-3128
A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...
Cross site scripting
A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...
CVE-2017-3128
A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...
CVE-2017-3128
A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...
CVE-2017-3128
Fortinet FortiOS is affected by a stored XSS vulnerability in the policy global-label parameter. Root cause: improper validation of user-supplied input. Affected versions are FortiOS 5.0.x and 5.2.x prior to 5.2.11. Exploitation requires authentication and privileges; an attacker with write privi...
CVE-2017-3128
A stored XSS Cross-Site-Scripting vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the policy global-label parameter...
Schneider Electric VAMPSET
CVSS v3 5.6 ATTENTION: Low skill level to exploit. Vendor: Schneider Electric Equipment: VAMPSET Vulnerability: Memory Corruption AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following VAMPSET setting and configuration software products: VAMPSET, versions prior ...
FortiPortal Multiple Vulnerabilities
Multiple vulnerabilities impacting FortiPortal were disclosed to Fortinet with details as follows:...
Fortinet FortiOS 5.2.x < 5.2.11 srcintf XSS (FG-IR-17-017)
The version of Fortinet FortiOS running on the remote FortiGate device is 5.2.x prior to 5.2.11. It is, therefore, affected by a cross-site scripting XSS vulnerability when creating firewall policies due to improper validation of input related to srcintf before returning it to users. An...
Fortinet FortiGate/FortiOS Cross-Site Scripting Vulnerability
Fortinet FortiGate is a network security platform developed by Fortinet. The platform provides firewall, antivirus and intrusion prevention IPS, application control, anti-spam, wireless controller and WAN acceleration, etc. Fortinet FortiOS is a set of security operating system developed by...
Fortinet FortiMail Cross-Site Scripting Vulnerability (CNVD-2017-04565)
Fortinet FortiMail is a mail information security appliance from the U.S. company Fita Fortinet, which provides a message filtering engine, anti-spam and threat defense. A cross-site scripting vulnerability exists in Fortinet FortiMail that stems from a failure to properly filter user-supplied...
FortiClient SSLVPN Privilege Elevation Vulnerability
Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in FortiClient SSLVPN. An attacker can exploit this vulnerability to gain root privileges...
Fortinet FortiOS SSH Undocumented Interactive Login Vulnerability (FG-IR-16-001) (SSH) - Active Check
An undocumented account used for communication with authorized FortiManager devices exists on some versions of FortiOS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...