Advisories · Technology
Fortinet FortiPAM.
Every CVE that names Fortinet FortiPAM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.5 Low
NULL pointer dereference in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 5.1 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 4.1 Medium
Fortinet FortiOS: A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3…
- Fortinet FortiOS
- Fortinet FortiPAM
- CWE-126
- CVSS 6.1 Medium
Cross-site scripting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Cross-site scripting (XSS)
- CVSS 5.0 Medium
Path traversal in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Path traversal
- CVSS 3.1 Low
HTTP response splitting in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Other injection
- CVSS 3.4 Low
HTTP response splitting in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Other injection
- CVSS 5.9 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 5.4 MediumCritical · KEVKEV
Path traversal in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Path traversal
- CVSS 6.3 Medium
Sensitive information in log files in Fortinet FortiSASE and others
- Fortinet FortiSASE
- Fortinet FortiProxy
- Information disclosure
- CVSS 1.7 Low
Improper privilege management in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Privilege escalation
- CVSS 3.8 Low
Fortinet FortiPAM: A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in…
- Fortinet FortiPAM
- CWE-316
- CVSS 5.0 Medium
Improper check for unusual conditions in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiPAM
- CWE-754
- CVSS 4.2 Medium
Information disclosure in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Information disclosure
- CVSS 5.7 Medium
Heap-based buffer overflow in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiOS
- Memory corruption
- CVSS 6.8 Medium
Improper certificate validation in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Weak cryptography or TLS
- CVSS 6.7 Medium
Heap-based buffer overflow in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Memory corruption
- CVSS 7.4 High
Weak authentication in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiSwitchManager
- Authentication bypass
- CVSS 7.9 High
Authentication bypass in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Authentication bypass
- CVSS 4.8 Medium
Integer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 6.3 Medium
Double free in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Memory corruption
- CVSS 6.0 Medium
Fortinet FortiPAM: A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0…
- Fortinet FortiPAM
- Fortinet FortiSRA
- CWE-280
- CVSS 4.4 Medium
Insufficient session expiration in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Authentication bypass
- CVSS 7.0 High
Uncontrolled format string in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiWeb
- Memory corruption
- CVSS 6.3 Medium
Uncontrolled format string in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiSwitchManager
- Memory corruption
- CVSS 7.5 High
Out-of-bounds read in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 3.5 Low
Out-of-bounds write in Fortinet FortiProxy and others
- Fortinet FortiProxy
- Fortinet FortiOS
- Memory corruption
- CVSS 5.2 Medium
Missing authentication in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiOS
- Authentication bypass
- CVSS 3.5 Low
Insufficient session expiration in Fortinet FortiPAM and others
- Fortinet FortiPAM
- Fortinet FortiProxy
- Authentication bypass
- CVSS 6.7 Medium
Stack-based buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSwitchManager
- Memory corruption
- CVSS 6.2 Medium
Uncontrolled format string in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 6.2 Medium
Uncontrolled format string in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Memory corruption
- CVSS 8.3 High
Uncontrolled format string in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Uncontrolled format string in Fortinet FortiSwitchManager and others
- Fortinet FortiSwitchManager
- Fortinet FortiOS
- Memory corruption
- CVSS 4.2 Medium
Resource allocation without limits in Fortinet FortiPAM
- Fortinet FortiPAM
- Denial of service
- CVSS 8.3 High
Double free in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption
- CVSS 7.0 High
Uncontrolled format string in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiPAM
- Memory corruption