Advisories · Technology

Fortinet FortiAnalyzer.

Every CVE that names Fortinet FortiAnalyzer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-22305 CVE record

CVSS 5.4 Medium

Improper certificate validation in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiSandbox
- Weak cryptography or TLS
Not analysed yet 1 Sept 2023
CVE-2021-43072 CVE record

CVSS 6.3 Medium

Buffer overflow in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Memory corruption
Not analysed yet 18 Jul 2023
CVE-2023-25606 CVE record

CVSS 6.2 Medium

Path traversal in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Path traversal
Not analysed yet 11 Jul 2023
CVE-2023-25609 CVE record

CVSS 4.2 Medium

Server-side request forgery in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Server-side request forgery (SSRF)
Not analysed yet 13 Jun 2023
CVE-2023-22642 CVE record

CVSS 6.8 Medium

Improper certificate validation in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2022-42477 CVE record

CVSS 6.5 Medium

Improper input validation in Fortinet FortiAnalyzer
- Fortinet FortiAnalyzer
- CWE-20
Not analysed yet 11 Apr 2023
CVE-2022-27490 CVE record

CVSS 5.1 Medium

Information disclosure in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Information disclosure
Not analysed yet 7 Mar 2023
CVE-2023-23776 CVE record

CVSS 4.6 Medium

Information disclosure in Fortinet FortiAnalyzer
- Fortinet FortiAnalyzer
- Information disclosure
Not analysed yet 7 Mar 2023
CVE-2023-25611 CVE record

CVSS 4.0 Medium

CSV injection in Fortinet FortiAnalyzer
- Fortinet FortiAnalyzer
- Other injection
Not analysed yet 7 Mar 2023
CVE-2022-30304 CVE record

CVSS 4.2 Medium

Cross-site scripting in Fortinet FortiAnalyzer
- Fortinet FortiAnalyzer
- Cross-site scripting (XSS)
Not analysed yet 16 Feb 2023
CVE-2022-38377 CVE record

CVSS 4.1 Medium

Improper access control in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Broken access control
Not analysed yet 25 Nov 2022
CVE-2021-42757 CVE record

CVSS 6.3 Medium

Buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiDDoS-F
- Memory corruption
Not analysed yet 8 Dec 2021
CVE-2020-12814 CVE record

CVSS 4.1 Medium

Fortinet FortiAnalyzer: A improper neutralization of input during web page generation ('cross-site scripting') in…
- Fortinet FortiAnalyzer
Not analysed yet 2 Nov 2021
CVE-2021-24021 CVE record

CVSS 4.3 Medium

An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated attacker to perform a store…
- Fortinet FortiAnalyzer
Not analysed yet 6 Oct 2021
CVE-2020-12811 CVE record

CVSS 4.9 Medium

Cross-site scripting in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Cross-site scripting (XSS)
Not analysed yet 24 Sept 2020
CVE-2020-12817 CVE record

An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to inject script related HTML tags via Name parameter of Storage Co…
- Fortinet FortiAnalyzer
Not analysed yet 24 Sept 2020
CVE-2020-6640 CVE record

An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Descrip…
- Fortinet FortiAnalyzer
Not analysed yet 4 Jun 2020
CVE-2018-13375 CVE record

Fortinet FortiAnalyzer: An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0…
- Fortinet FortiAnalyzer
- Fortinet FortiManager
Not analysed yet 28 May 2019