Advisories · Technology
Fortinet FortiSOAR on-premise.
Every CVE that names Fortinet FortiSOAR on-premise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
Improper access control in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Broken access control
- CVSS 6.2 Medium
Path traversal in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Path traversal
- CVSS 6.7 Medium
Improper authentication in Fortinet FortiSOAR PaaS and others
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- Authentication bypass
- CVSS 4.1 Medium
Server-side request forgery in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Server-side request forgery (SSRF)
- CVSS 6.2 Medium
Cleartext transmission of sensitive information in Fortinet FortiSOAR PaaS and others
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- Weak cryptography or TLS
- CVSS 5.4 Medium
Cleartext transmission of sensitive information in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Weak cryptography or TLS
- CVSS 4.1 Medium
Fortinet FortiSOAR PaaS: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS…
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- CWE-257
- CVSS 4.4 Medium
Cross-site scripting in Fortinet FortiSOAR PaaS and others
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Fortinet FortiSOAR PaaS: A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS…
- Fortinet FortiSOAR PaaS
- Fortinet FortiSOAR on-premise
- CWE-257
- CVSS 6.2 Medium
Improper access control in Fortinet FortiSOAR on-premise and others
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- Broken access control
- CVSS 6.5 Medium
Fortinet FortiSOAR on-premise: An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR…
- Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR PaaS
- CWE-620
- CVSS 6.6 Medium
OS command injection in Fortinet FortiSOAR on-premise
- Fortinet FortiSOAR on-premise
- Command injection
- CVSS 4.1 Medium
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610