Browse CVEs

HIGH 8.8 CVE-2019-13402 /usr/sbin/default.sh and /usr/apache/htdocs/cgi-bin/admin/hardfactorydefault.cgi on Dynacolor FCM-MB40 v1.2.0.0 devices implement an incomplete facto… Fcm Mb40 Firmware No fix yet Fix from $1,9502019-07-08 HIGH 7.2 CVE-2019-13398 Dynacolor FCM-MB40 v1.2.0.0 devices allow remote attackers to execute arbitrary commands via a crafted parameter to a CGI script, as demonstrated by … Fcm Mb40 Firmware No fix yet Fix from $1,9502019-07-08 MEDIUM 5.9 CVE-2019-13399 Dynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an administrator's SSL conversation. Fcm Mb40 Firmware No fix yet Fix from $1,6002019-07-08 CRITICAL 9.8 CVE-2018-1352 A format string vulnerability in Fortinet FortiOS 5.6.0 allows attacker to execute unauthorized code or commands via the SSH username variable. Fortios Mitigation only Fix from $2,3002019-02-08 CRITICAL 9.8 CVE-2017-14189 An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully log-in regar… Fortiweb Manager Mitigation only Fix from $2,3002017-11-29 MEDIUM 6.1 CVE-2017-7739 A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5… Fortios Mitigation only Fix from $1,6002017-11-13 MEDIUM 6.5 CVE-2017-14182 A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresp… Fortios Mitigation only Fix from $1,6002017-10-27 MEDIUM 6.1 CVE-2017-7733 A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary… Fortios Mitigation only Fix from $1,6002017-10-27 MEDIUM 6.1 CVE-2017-7732 A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized p… Fortimail Mitigation only Fix from $1,6002017-10-26 MEDIUM 5.4 CVE-2017-7335 A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.… Fortiwlc Mitigation only Fix from $1,6002017-10-26 MEDIUM 5.4 CVE-2017-3131EPSS 8% A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or comm… Fortios No fix yet Fix from $1,6002017-09-12 MEDIUM 5.4 CVE-2017-7734 A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via '… Fortios Mitigation only Fix from $1,6002017-09-12 MEDIUM 5.4 CVE-2017-7735 A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthoriz… Fortios Mitigation only Fix from $1,6002017-09-12 HIGH 7.8 CVE-2015-3617 Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands. Fortimanager Firmware Mitigation only Fix from $1,9502017-08-22 CRITICAL 9.8 CVE-2015-3616 SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands vi… Fortimanager Firmware Mitigation only Fix from $2,3002017-08-11 HIGH 7.5 CVE-2015-3614 Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspeci… Fortimanager Firmware Mitigation only Fix from $1,9502017-08-11 MEDIUM 5.4 CVE-2015-3615 Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject… Fortimanager Firmware Mitigation only Fix from $1,6002017-08-11 HIGH 7.5 CVE-2017-3130 An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting… Fortios Mitigation only Fix from $1,9502017-08-10 HIGH 8.8 CVE-2016-8493 In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability. Forticlient Mitigation only Fix from $1,9502017-06-26 MEDIUM 6.1 CVE-2017-3127 A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srci… Fortios Mitigation only Fix from $1,6002017-06-01 MEDIUM 6.1 CVE-2017-3126 An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthor… Fortianalyzer Firmware Mitigation only Fix from $1,6002017-05-27 MEDIUM 6.1 CVE-2017-3125 An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the secur… Fortimail Mitigation only Fix from $1,6002017-04-12 MEDIUM 5.9 CVE-2016-7541 Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the… Fortios Mitigation only Fix from $1,6002017-03-30 HIGH 7.4 CVE-2016-8495 An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof… Fortimanager Firmware Mitigation only Fix from $1,9502017-02-13 HIGH 7.2 CVE-2016-8494 Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a … Connect Mitigation only Fix from $1,9502017-02-09 CRITICAL 9.1 CVE-2016-8491 The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell. Fortiwlc Mitigation only Fix from $2,3002017-02-01 MEDIUM 5.4 CVE-2015-7363 Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware… Fortimanager Firmware Mitigation only Fix from $1,6002016-10-07 CRITICAL 9.8 CVE-2016-4573 Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D… Fortiswitch Mitigation only Fix from $2,3002016-09-09 MEDIUM 6.1 CVE-2016-3195 Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before… Fortimanager Firmware Mitigation only Fix from $1,6002016-08-19 MEDIUM 6.1 CVE-2016-3194 Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyze… Fortimanager Firmware Mitigation only Fix from $1,6002016-08-19