Fortigate Firewalls - CSRF Vulnerability

Exploit for hardware platform in category web applications Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version:...

Fortigate Firewall Cross Site Request Forgery

Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version: input type="submit" name="add" value="reb...

CVE-2013-4604

Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of arbitrary users by leveraging the Guest role...

Design/Logic Flaw

Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of arbitrary users by leveraging the Guest role...

CVE-2013-4604

Fortinet FortiOS prior to 5.0.3 on FortiGate devices is affected by CVE-2013-4604 due to improper restriction of the Guest user capabilities. This allows remote authenticated users with the Guest role to read, modify, or delete records of arbitrary users. The issue stems from insufficient access ...

CVE-2013-4604

Fortinet FortiOS before 5.0.3 on FortiGate devices does not properly restrict Guest capabilities, which allows remote authenticated users to read, modify, or delete the records of arbitrary users by leveraging the Guest role...

Improper Guest User Permission Management Issue in FortiGate

...

Potential Man-In-The Middle Vulnerability in FortiClient VPN

...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption IBE appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via 1 the Add field for the Black List under Antispam...

CVE-2013-1471

CVE-2013-1471 describes multiple XSS vulnerabilities in Fortinet FortiMail prior to 4.3.4 on FortiMail Identity-Based Encryption (IBE) appliances. The issues arise from insufficient input sanitization in the web UI, specifically in admin/FEAdmin.html (the Add field for the Black List under Antisp...

CVE-2013-1471

Multiple cross-site scripting XSS vulnerabilities in admin/FEAdmin.html in Fortinet FortiMail before 4.3.4 on FortiMail Identity-Based Encryption IBE appliances allow user-assisted remote attackers to inject arbitrary web script or HTML via 1 the Add field for the Black List under Antispam...

FortiNet FortiMail security vulnerabilities

Different vulnerabilities in Web interface...

Fortinet FortiMail 400 IBE - Multiple Vulnerabilities

Fortinet FortiMail 400 IBE - Multiple Vulnerabilities Title: ====== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities Date: ===== 2013-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=701 VL-ID: ===== 701 Common Vulnerability Scoring System:...

Potential Web Vulnerabilities in FortiMail

...

Fortinet FortiMail 400 IBE - Multiple Vulnerabilities

Title: ====== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities Date: ===== 2013-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=701 VL-ID: ===== 701 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: =============...

Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities

Document Title: =============== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=701 www.fortiguard.com/advisory/FG-IR-013-001.html Video: http://www.youtube.com/watch?v=5d7cIaM80oY Release Date:...

Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities

Document Title: =============== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=701 www.fortiguard.com/advisory/FG-IR-013-001.html Video: http://www.youtube.com/watch?v=5d7cIaM80oY Release Date:...

Potential Cross Site Scripting Vulnerability in FortiDB

...

FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities

Document Title: =============== FortiWeb 4kC,3kC,1kC & VA - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=702 http://www.fortiguard.com/advisory/FG-IR-012-008.html CVE ID: 2012-6346 Release Date: ============= 2012-12-02...

Fortinet FortiWeb (Multiple Appliances) - Multiple Cross-Site Scripting Vulnerabilities

Fortinet FortiWeb Multiple Appliances - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56774/info Multiple Fortinet FortiWeb Appliances are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. A...