Advisories · Technology
Fortinet FortiManager.
Every CVE that names Fortinet FortiManager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
SQL injection in Fortinet FortiManager Cloud and others
- Fortinet FortiManager Cloud
- Fortinet FortiAnalyzer Cloud
- SQL injection
- CVSS 5.9 Medium
SQL injection in Fortinet FortiAnalyzer Cloud and others
- Fortinet FortiAnalyzer Cloud
- Fortinet FortiAnalyzer
- SQL injection
- CVSS 6.5 Medium
SQL injection in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- SQL injection
- CVSS 5.3 Medium
OS command injection in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiManager Cloud
- Command injection
- CVSS 4.7 Medium
Improper access control in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiManager Cloud
- Broken access control
- CVSS 7.3 High
Authentication bypass in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiManager Cloud
- Authentication bypass
- CVSS 5.2 Medium
Fortinet FortiAnalyzer: A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0…
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- CWE-676
- CVSS 5.4 Medium
Path traversal in Fortinet FortiManager Cloud and others
- Fortinet FortiManager Cloud
- Fortinet FortiManager
- Path traversal
- CVSS 6.5 Medium
SQL injection in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- SQL injection
- CVSS 3.4 Low
Unlimited authentication attempts in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager Cloud
- Authentication bypass
- CVSS 6.3 Medium
Improper certificate validation in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Weak cryptography or TLS
- CVSS 6.4 Medium
Fortinet FortiAnalyzer: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3…
- Fortinet FortiAnalyzer
- Fortinet FortiAnalyzer Cloud
- CWE-912
- CVSS 6.8 Medium
Authentication bypass in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Authentication bypass
- CVSS 6.5 Medium
Uncontrolled format string in Fortinet FortiManager Cloud and others
- Fortinet FortiManager Cloud
- Fortinet FortiAnalyzer Cloud
- Memory corruption
- CVSS 7.0 High
Stack-based buffer overflow in Fortinet FortiManager
- Fortinet FortiManager
- Memory corruption
- CVSS 9.4 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Authentication bypass in Fortinet FortiWeb and others
- Fortinet FortiWeb
- Fortinet FortiNAC-F
- Authentication bypass
- CVSS 5.9 Medium
Fortinet FortiAnalyzer: A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2…
- Fortinet FortiAnalyzer
- Fortinet FortiPortal
- CWE-320
- CVSS 4.2 Medium
Information disclosure in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Information disclosure
- CVSS 6.5 Medium
Heap-based buffer overflow in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Memory corruption
- CVSS 5.2 Medium
Path traversal in Fortinet FortiManager
- Fortinet FortiManager
- Path traversal
- CVSS 2.6 Low
SQL injection in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- SQL injection
- CVSS 2.1 Low
Missing authorization in Fortinet FortiManager
- Fortinet FortiManager
- Broken access control
- CVSS 7.1 High
Fortinet FortiProxy: A improper restriction of communication channel to intended endpoints vulnerability…
- Fortinet FortiProxy
- Fortinet FortiManager
- CWE-923
- CVSS 5.0 Medium
Log injection in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Other injection
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and v…
- Fortinet FortiSwitchManager
- Fortinet FortiAnalyzer
- Memory corruption
- CVSS 5.9 Medium
Sensitive information in log files in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Information disclosure
- CVSS 8.3 High
Command injection in Fortinet FortiManager
- Fortinet FortiManager
- Command injection
- CVSS 4.0 Medium
SQL injection in Fortinet FortiManager
- Fortinet FortiManager
- SQL injection
- CVSS 6.5 Medium
OS command injection in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Command injection
- CVSS 6.8 Medium
OS command injection in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Command injection
- CVSS 5.9 Medium
Path traversal in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Path traversal
- CVSS 3.9 Low
Hard-coded cryptographic key in Fortinet FortiManager
- Fortinet FortiManager
- Hard-coded credentials
- CVSS 4.1 Medium
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610
- CVSS 6.7 Medium
Weak authentication in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Authentication bypass
- CVSS 6.9 Medium
Fortinet FortiAnalyzer Cloud: A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through…
- Fortinet FortiAnalyzer Cloud
- Fortinet FortiManager
- Privilege escalation
- CVSS 5.2 Medium
Path traversal in Fortinet FortiManager
- Fortinet FortiManager
- Path traversal
- CVSS 7.9 High
Fortinet FortiManager: An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12…
- Fortinet FortiManager
- CWE-672
- CVSS 8.4 High
Missing authentication in Fortinet FortiManager
- Fortinet FortiManager
- Authentication bypass
- CVSS 6.4 Medium
Path traversal in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Path traversal
- CVSS 6.7 Medium
Fortinet FortiManager Cloud: A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1…
- Fortinet FortiManager Cloud
- Fortinet FortiManager
- Privilege escalation
- CVSS 6.7 Medium
Path traversal in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Path traversal
- CVSS 7.0 High
Out-of-bounds write in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Memory corruption
- CVSS 5.0 Medium
Stack-based buffer overflow in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager Cloud
- Memory corruption
- CVSS 6.5 Medium
SQL injection in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- SQL injection
- CVSS 7.0 High
Path traversal in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Path traversal
- CVSS 7.2 High
OS command injection in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiManager Cloud
- Command injection
- CVSS 7.7 High
Use after free in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Memory corruption
- CVSS 7.2 High
OS command injection in Fortinet FortiManager
- Fortinet FortiManager
- Command injection
- CVSS 6.3 Medium
Stack-based buffer overflow in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Memory corruption
- CVSS 5.3 Medium
Heap-based buffer overflow in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Memory corruption
- CVSS 5.2 Medium
Missing authentication in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Authentication bypass
- CVSS 2.2 Low
Path traversal in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Path traversal
- CVSS 6.3 Medium
OS command injection in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Command injection
- CVSS 4.8 Medium
Path traversal in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Path traversal
- CVSS 3.9 Low
Exposure of personal information in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Information disclosure
- CVSS 4.7 Medium
Path traversal in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Path traversal
- CVSS 7.1 High
Fortinet FortiManager: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at…
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- CWE-602
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Missing authentication in Fortinet FortiManager
- Fortinet FortiManager
- Authentication bypass
- CVSS 3.1 Low
Information disclosure in Fortinet FortiManager
- Fortinet FortiManager
- Information disclosure
- CVSS 4.7 Medium
Insecure direct object reference in Fortinet FortiAnalyzer and others
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- Broken access control