Browse CVEs

MEDIUM 5.9 CVE-2016-7541 Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates when the… Fortios Mitigation only Fix from $1,6002017-03-30 HIGH 7.4 CVE-2016-8495 An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof… Fortimanager Firmware Mitigation only Fix from $1,9502017-02-13 HIGH 7.2 CVE-2016-8494 Insufficient verification of uploaded files allows attackers with webui administrators privileges to perform arbitrary code execution by uploading a … Connect Mitigation only Fix from $1,9502017-02-09 MEDIUM 5.9 CVE-2016-8492 The implementation of an ANSI X9.31 RNG in Fortinet FortiGate allows attackers to gain unauthorized read access to data handled by the device via IPS… Fortios after 4.3.18 Fix from $1,6002017-02-08 CRITICAL 9.1 CVE-2016-8491 The presence of a hardcoded account named 'core' in Fortinet FortiWLC allows attackers to gain unauthorized read/write access via a remote shell. Fortiwlc Mitigation only Fix from $2,3002017-02-01 MEDIUM 5.4 CVE-2015-7363 Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.3, in hardware… Fortimanager Firmware Mitigation only Fix from $1,6002016-10-07 HIGH 7.2 CVE-2016-7561 Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by… Fortiwlc after 6.1-2-29 Fix from $1,9502016-10-05 CRITICAL 9.8 CVE-2016-7560 The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which al… Fortiwlc after 6.1-2-29 Fix from $2,3002016-10-05 MEDIUM 6.1 CVE-2016-4969 Cross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote attackers to inject arbitrary web scri… Fortiwan after 4.2.4 Fix from $1,6002016-09-21 MEDIUM 6.5 CVE-2016-4968 The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover administra… Fortiwan after 4.2.4 Fix from $1,6002016-09-21 MEDIUM 6.5 CVE-2016-4967 Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain sensitive information from (1) a backup of the devic… Fortiwan after 4.2.4 Fix from $1,6002016-09-21 MEDIUM 6.5 CVE-2016-4966 The diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to download PCAP files via v… Fortiwan after 4.2.4 Fix from $1,6002016-09-21 HIGH 8.8 CVE-2016-4965 Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary… Fortiwan after 4.2.4 Fix from $1,9502016-09-21 CRITICAL 9.8 CVE-2016-4573 Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D… Fortiswitch Mitigation only Fix from $2,3002016-09-09 CRITICAL 9.8 CVE-2016-6909EPSS 50% Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch before 3.4.3 … Fortios 4.1.11 / 4.2.13+ Fix from $2,3002016-08-24 MEDIUM 6.1 CVE-2016-3195 Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before… Fortimanager Firmware Mitigation only Fix from $1,6002016-08-19 MEDIUM 6.1 CVE-2016-3194 Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyze… Fortimanager Firmware Mitigation only Fix from $1,6002016-08-19 MEDIUM 5.4 CVE-2016-3193 Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x b… Fortimanager Firmware Mitigation only Fix from $1,6002016-08-19 MEDIUM 5.4 CVE-2016-3196 Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.… Fortimanager Firmware Mitigation only Fix from $1,6002016-08-05 HIGH 8.8 CVE-2016-4066 Cross-site request forgery (CSRF) vulnerability in Fortinet FortiWeb before 5.5.3 allows remote attackers to hijack the authentication of administrat… Fortiweb after 5.5.2 Fix from $1,9502016-07-13 MEDIUM 6.1 CVE-2015-7360 Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attackers to i… Fortisandbox Firmware after 2.0.4 Fix from $1,6002016-05-26 MEDIUM 6.1 CVE-2016-3978EPSS 7% The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote attackers to redirect users t… Fortios Mitigation only Fix from $1,6002016-04-08 CRITICAL 9.8 CVE-2016-1909EPSS 71% Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.x before … Fortios after 4.3.16 Fix from $2,3002016-01-15 HIGH 7.8 CVE-2015-7362 Fortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory that is world readable and executable, allows local … Forticlient Mitigation only Fix from $1,9502016-01-08 HIGH 9.3 CVE-2015-7361 FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authentication for a… Fortios Mitigation only Fix from $1,9502015-10-15 HIGH 7.2 CVE-2015-5737 The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, (4) mdare64_52.sys, and (5) Fortishield.sys drivers in Fortinet FortiClient before 5.… Forticlient after 5.2.3 Fix from $1,9502015-09-03 HIGH 7.2 CVE-2015-5736 The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the ca… Forticlient after 5.2.3 Fix from $1,9502015-09-03 HIGH 7.2 CVE-2015-5735 The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient before 5.2.4 allow local users… Forticlient after 5.2.3 Fix from $1,9502015-09-03 MEDIUM 5.0 CVE-2015-5965 The SSL-VPN feature in Fortinet FortiOS before 4.3.13 only checks the first byte of the TLS MAC in finished messages, which makes it easier for remot… Fortios after 4.3.12 Fix from $1,6002015-08-11 MEDIUM 6.4 CVE-2015-2323 FortiOS 5.0.x before 5.0.12 and 5.2.x before 5.2.4 supports anonymous, export, RC4, and possibly other weak ciphers when using TLS to connect to Fort… Fortios Mitigation only Fix from $1,6002015-08-11