898 matches found
Privilege escalation in automation-stitch
...
Firewall session injection in FGSP
...
Insufficient Session Expiration in SSL-VPN cookie
...
Privilege escalation in GUI websocket module
...
SSH key is added even if operation is aborted
...
Weak authentication in security fabric daemon
...
Denial of Service in Security Fabric Root
...
Unauthorized modification of global threat feeds
...
Buffer over-read in FGFM
...
TACACS+ authentication bypass
...
Use of uninitialized resource in SSLVPN websocket
...
Unverified password change via set_password endpoint
...
Log Pollution via login page
...
No certificate name verification for fgfm connection
...
LDAP Clear-text credentials retrievable with IP modification
...
Incorrect authorization in GUI console
...
OS command injection in CLI command
...
Client-side enforcement of server-side security related to vm download feature
...
Authenticated SQLI on CLI
...
error based SQLI on device del feature
...
OS Command Injection in administrative interface
...
Multiple format string vulnerabilities
...
Os command injection on vm download feature
...
Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466
...
Use of hardcoded key used for remote backup server password encryption
...
Disclosure of Logs of Devices not belonging to the Current ADOM from Log View
...
Multiple arbitrary file deletion in the CLI
...
Use of Hard-coded Cryptographic Key to encrypt sensitive data
...
Insertion of sensitive information into Event log
...
Permission escalation due to an Improper Privilege Management
...
Multiple Reflected and Stored Cross-Site Scripting
...
Stack buffer overflow in fabric service
...
OS command injection in external connector
...
FortiOS / FortiProxy / FortiPAM / FortiSwitchManager - Format string vulnerability in CLI commands
...
Multipart Form Data Denial of Service
...
SSLVPN DOS
...
Out of bounds read in ipsec ike
...
SQL injections in sdnproxy daemon
...
Out-of-bounds Write in IPSEC Daemon
...
OS command injection
...
Weak Authentication in csfd daemon
...
Authentication bypass in Node.js websocket module and CSF requests
...
`Host` header injection
...
Restricted Shell Escape via Argument Injection
...
Out-of-bounds Write in sndproxy
...
OS Command Injection
...
Null pointer dereference leading to sslvpn DOS
...
Multiple privilege escalation
...