Advisories · Technology
Fortinet FortiADC.
Every CVE that names Fortinet FortiADC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.2 Medium
Cross-site scripting in Fortinet FortiADC
- Fortinet FortiADC
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
Out-of-bounds write in Fortinet FortiADC
- Fortinet FortiADC
- Memory corruption
- CVSS 3.9 Low
Information disclosure in Fortinet FortiADC
- Fortinet FortiADC
- Information disclosure
- CVSS 6.2 Medium
Information disclosure in Fortinet FortiADC
- Fortinet FortiADC
- Information disclosure
- CVSS 6.6 Medium
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 7.0 High
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 8.6 High
Cross-site scripting in Fortinet FortiADC
- Fortinet FortiADC
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610
- CVSS 3.4 Low
Fortinet FortiADC: An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC…
- Fortinet FortiADC
- CWE-358
- CVSS 7.2 High
Improper certificate validation in Fortinet FortiADC
- Fortinet FortiADC
- Weak cryptography or TLS
- CVSS 4.8 Medium
Improper access control in Fortinet FortiADC
- Fortinet FortiADC
- Broken access control
- CVSS 4.7 Medium
Improper certificate validation in Fortinet FortiADC
- Fortinet FortiADC
- Weak cryptography or TLS
- CVSS 5.2 Medium
Fortinet FortiADC: An exposure of sensitive system information to an unauthorized control sphere…
- Fortinet FortiADC
- Information disclosure
- CVSS 6.9 Medium
Improper authorization in Fortinet FortiADC
- Fortinet FortiADC
- Broken access control
- CVSS 5.4 Medium
Fortinet FortiDDoS-F: A permissive cross-domain policy with untrusted domains vulnerability in Fortinet…
- Fortinet FortiDDoS-F
- Fortinet FortiADC
- CWE-942
- CVSS 6.2 Medium
Buffer overflow in Fortinet FortiDDoS-F and others
- Fortinet FortiDDoS-F
- Fortinet FortiADC
- Memory corruption
- CVSS 7.9 High
Improper access control in Fortinet FortiADC
- Fortinet FortiADC
- Broken access control
- CVSS 7.4 High
OS command injection in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Command injection
- CVSS 7.4 High
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 6.3 Medium
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 7.8 High
OS command injection in Fortinet FortiADC and others
- Fortinet FortiADC
- Fortinet FortiADCManager
- Command injection
- CVSS 5.7 Medium
Path traversal in Fortinet FortiADC
- Fortinet FortiADC
- Path traversal
- CVSS 7.6 High
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 3.3 Low
Cross-site scripting in Fortinet FortiADC
- Fortinet FortiADC
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
OS command injection in Fortinet FortiWeb and others
- Fortinet FortiWeb
- Fortinet FortiADC
- Command injection
- CVSS 7.1 High
OS command injection in Fortinet FortiDDoS and others
- Fortinet FortiDDoS
- Fortinet FortiDDoS-F
- Command injection
- CVSS 7.4 High
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 8.6 High
OS command injection in Fortinet FortiADC
- Fortinet FortiADC
- Command injection
- CVSS 5.1 Medium
SQL injection in Fortinet FortiADC
- Fortinet FortiADC
- SQL injection
- CVSS 5.1 Medium
Improper input validation in Fortinet FortiADC
- Fortinet FortiADC
- CWE-20
- CVSS 5.3 Medium
An improper handling of malformed request vulnerability [CWE-228] exists in FortiADC 5.0 all versions, 6.0.0 all versions, 6.1.0 all versions, 6.2.0 through 6.2.3, and 7.0.0 through 7.0.2.
- Fortinet FortiADC
- CVSS 8.8 High
Fortinet FortiADC: A improper neutralization of input during web page generation ('cross-site scripting') in…
- Fortinet FortiADC
- CVSS 8.0 High
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross si…
- Fortinet FortiADC
- CVSS 6.3 Medium
Fortinet FortiADC: An improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and…
- Fortinet FortiADC
- CVSS 5.4 Medium
Fortinet FortiADC: A unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x…
- Fortinet FortiADC
- CVSS 5.4 Medium
Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may al…
- Fortinet FortiADC
- CVSS 6.3 Medium
Stack-based buffer overflow in Fortinet FortiFone and others
- Fortinet FortiFone
- Fortinet FortiADC
- Memory corruption
- CVSS 6.3 Medium
Buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiDDoS-F
- Memory corruption
- CVSS 4.3 Medium
A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as user…
- Fortinet FortiADC
-
An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site scripting attack (XSS) via the name parameter.
- Fortinet FortiADC
-
Fortinet FortiADC: An improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier…
- Fortinet FortiADC