Browse CVEs

MEDIUM 5.4 CVE-2017-14186 A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portal allows… Fortios after 5.6.2 Fix from $1,6002017-11-29 MEDIUM 5.4 CVE-2017-7736 A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to i… Fortiweb after 5.7.1 Fix from $1,6002017-11-22 MEDIUM 6.1 CVE-2017-7739 A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5… Fortios Mitigation only Fix from $1,6002017-11-13 MEDIUM 6.5 CVE-2017-14182 A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporarily unresp… Fortios Mitigation only Fix from $1,6002017-10-27 MEDIUM 6.1 CVE-2017-7733 A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute arbitrary… Fortios Mitigation only Fix from $1,6002017-10-27 HIGH 7.2 CVE-2017-7341 An OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0-10, 8.0 through 8.2, and 8.3.0 through 8.3.2 file m… Fortiwlc after 8.3.2 Fix from $1,9502017-10-26 MEDIUM 6.1 CVE-2017-7732 A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3.0 through 5.3.9 customized p… Fortimail Mitigation only Fix from $1,6002017-10-26 MEDIUM 5.4 CVE-2017-7335 A Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7.0-x (7.0-7, 7.0-8, 7.0-9, 7.0-10); and 8.x (8.0, 8.… Fortiwlc Mitigation only Fix from $1,6002017-10-26 MEDIUM 6.1 CVE-2017-3132EPSS 8% A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the… Fortios after 5.6.0 Fix from $1,6002017-09-12 MEDIUM 6.1 CVE-2017-3133EPSS 11% A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the… Fortios after 5.6.0 Fix from $1,6002017-09-12 MEDIUM 5.4 CVE-2017-3131EPSS 8% A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or comm… Fortios No fix yet Fix from $1,6002017-09-12 MEDIUM 5.4 CVE-2017-7734 A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via '… Fortios Mitigation only Fix from $1,6002017-09-12 MEDIUM 5.4 CVE-2017-7735 A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows attackers to execute unauthoriz… Fortios Mitigation only Fix from $1,6002017-09-12 HIGH 7.8 CVE-2015-3617 Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands. Fortimanager Firmware Mitigation only Fix from $1,9502017-08-22 CRITICAL 9.8 CVE-2015-3616 SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands vi… Fortimanager Firmware Mitigation only Fix from $2,3002017-08-11 HIGH 7.5 CVE-2015-3614 Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspeci… Fortimanager Firmware Mitigation only Fix from $1,9502017-08-11 MEDIUM 5.4 CVE-2015-3615 Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject… Fortimanager Firmware Mitigation only Fix from $1,6002017-08-11 HIGH 7.5 CVE-2017-3130 An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting… Fortios Mitigation only Fix from $1,9502017-08-10 CRITICAL 9.8 CVE-2017-7336 A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands with 'upgr… Fortiwlm after 8.3.0 Fix from $2,3002017-07-22 HIGH 8.8 CVE-2016-8493 In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability. Forticlient Mitigation only Fix from $1,9502017-06-26 MEDIUM 6.1 CVE-2017-3127 A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srci… Fortios Mitigation only Fix from $1,6002017-06-01 CRITICAL 9.1 CVE-2017-7337 An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or e… Fortiportal after 4.0.0 Fix from $2,3002017-05-27 HIGH 7.5 CVE-2017-7338 A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out information disclosure via the F… Fortiportal after 4.0.0 Fix from $1,9502017-05-27 HIGH 7.5 CVE-2017-7731 A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the F… Fortiportal after 4.0.0 Fix from $1,9502017-05-27 HIGH 7.2 CVE-2017-3134 An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root access via the CLI command 'co… Fortiwlc Sd after 8.2.4 Fix from $1,9502017-05-27 MEDIUM 6.1 CVE-2017-3129 A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an im… Fortiweb after 5.7.1 Fix from $1,6002017-05-27 MEDIUM 6.1 CVE-2017-7339 A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via… Fortiportal after 4.0.0 Fix from $1,6002017-05-27 MEDIUM 6.1 CVE-2017-7343 An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter. Fortiportal after 4.0.0 Fix from $1,6002017-05-27 MEDIUM 6.1 CVE-2017-3126 An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthor… Fortianalyzer Firmware Mitigation only Fix from $1,6002017-05-27 MEDIUM 6.1 CVE-2017-3125 An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the secur… Fortimail Mitigation only Fix from $1,6002017-04-12