fortinet fortianalyzer vulnerabilities and exploits

(subscribe to this query)

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer prior to 5.0.5 does not properly validate the csrf_token parameter, which allows remote malicious users to perform cross-site request forgery (CSRF) attacks.

Fortinet Fortianalyzer Firmware Fortinet Fortianalyzer-2000b -Fortinet Fortianalyzer-200d -Fortinet Fortianalyzer-4000b -Fortinet Fortianalyzer-3000d -Fortinet Fortianalyzer-1000d -Fortinet Fortianalyzer-300d -

1 EDB exploit

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions before 7.2.1, 7.0.4 and 6.4.8 may allow a remote unauthenticated malicious user to perform a stored cross site scripting (XSS) attack via the URL parameter observed in ...

Fortinet Fortianalyzer Fortinet Fortianalyzer 7.2.0 Fortinet Fortianalyzer 7.2.1

A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiManager version 7.4.0 up to and including 7.4.1, version 7.2.0 up to and including 7.2.3 and prior to 7.0.10, Fortinet FortiAnalyzer version 7.4.0 up to and including 7.4.1, version 7.2.0 up to ...

Fortinet Fortianalyzer Fortinet Fortimanager Fortinet Fortianalyzer Bigdata Fortinet Fortianalyzer Bigdata 6.2.5 Fortinet Fortiportal

An improper neutralization of input vulnerability in FortiAnalyzer prior to 6.4.1 and 6.2.5 may allow a remote authenticated malicious user to inject script related HTML tags via Name parameter of Storage Connectors.

Fortinet Fortianalyzer 6.2.5 Fortinet Fortianalyzer 6.4.0 Fortinet Fortianalyzer 6.4.1 Fortinet Fortitester Fortinet Fortitester 3.8.0

Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x prior to 5.0.12, 5.2.x prior to 5.2.6, and 5.4.x prior to 5.4.1 and FortiAnalyzer 5.x prior to 5.0.13, 5.2.x prior to 5.2.6, and 5.4.x prior to 5.4.1 allows remote authenticated...

Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x prior to 5.0.12 and 5.2.x prior to 5.2.6 and FortiAnalyzer 5.x prior to 5.0.13 and 5.2.x prior to 5.2.6 allows remote malicious users to inject arbitrary web script or HTML via unspeci...

Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x prior to 5.0.12 and 5.2.x prior to 5.2.6 and FortiAnalyzer 5.x prior to 5.0.13 and 5.2.x prior to 5.2.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors...

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 up to and including 7.4.1 and prior to 7.2.5, FortiAnalyzer version 7.4.0 up to and including 7.4.1 and prior to 7.2.5 and FortiAnalyzer-BigData prior to 7...

Fortinet Fortianalyzer Fortinet Fortimanager Fortinet Fortianalyzer 7.4.0 Fortinet Fortimanager 7.4.0 Fortinet Fortimanager 7.4.1 Fortinet Fortianalyzer 7.4.1

A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 up to and including 7.2.1, 7.0.0 up to and including 7.0.6, 6.4.8 up to and including 6.4.11 may allow a remote and authenticated malicious user to access unauthorized files a...

Fortinet Fortimanager 7.2.0 Fortinet Fortianalyzer 7.2.0 Fortinet Fortianalyzer 7.2.1 Fortinet Fortimanager 7.2.1 Fortinet Fortimanager Fortinet Fortianalyzer

Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x prior to 5.0.12 and 5.2.x prior to 5.2.6 and FortiManager 5.x prior to 5.0.12 and 5.2.x prior to 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uplo...

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook