Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
fortinet fortianalyzer vulnerabilities and exploits
(subscribe to this query)
4
CVSSv2
CVE-2021-32587
An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker with restricted user profile to retrieve the list of administrative u...
Fortinet Fortianalyzer
Fortinet Fortimanager
4
CVSSv2
CVE-2021-32598
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote malicious user ...
Fortinet Fortianalyzer
Fortinet Fortimanager
4
CVSSv2
CVE-2021-32603
A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated malicious user to access unauthorized files and services on the syst...
Fortinet Fortianalyzer
Fortinet Fortimanager
4
CVSSv2
CVE-2018-1354
An improper access control vulnerability in Fortinet FortiManager 6.0.0, 5.6.5 and below versions, FortiAnalyzer 6.0.0, 5.6.5 and below versions allows a regular user edit the avatar picture of other users with arbitrary content.
Fortinet Fortianalyzer
Fortinet Fortimanager
3.5
CVSSv2
CVE-2020-12814
A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows malicious user to execute unauthorized code or commands via specifically crafted requests to the web GUI.
Fortinet Fortianalyzer
Fortinet Fortianalyzer 6.4.4
3.5
CVSSv2
CVE-2021-24021
An improper neutralization of input vulnerability [CWE-79] in FortiAnalyzer versions 6.4.3 and below, 6.2.7 and below and 6.0.10 and below may allow a remote authenticated malicious user to perform a stored cross site scripting attack (XSS) via the column settings of Logview in F...
Fortinet Fortianalyzer
3.5
CVSSv2
CVE-2021-32597
Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below user interface, may allow a remote authenticated malicious user to perform a Stored Cross Site Scripting attack (XSS) b...
Fortinet Fortianalyzer
Fortinet Fortimanager
3.5
CVSSv2
CVE-2020-12815
An improper neutralization of input vulnerability in FortiTester prior to 3.9.0 may allow a remote authenticated malicious user to inject script related HTML tags via IPv4/IPv6 address fields.
Fortinet Fortianalyzer
Fortinet Fortitester
Fortinet Fortitester 3.8.0
3.5
CVSSv2
CVE-2020-6640
An improper neutralization of input vulnerability in the Admin Profile of FortiAnalyzer may allow a remote authenticated malicious user to perform a stored cross site scripting attack (XSS) via the Description Area.
Fortinet Fortianalyzer
3.5
CVSSv2
CVE-2015-7363
Cross-site scripting (XSS) vulnerability in the advanced settings page in Fortinet FortiManager 5.x prior to 5.0.12 and 5.2.x prior to 5.2.3, in hardware models with a hard disk, and FortiAnalyzer 5.x prior to 5.0.13 and 5.2.x prior to 5.2.3 allows remote administrators to inject...
Fortinet Fortimanager Firmware 5.0.0
Fortinet Fortimanager Firmware 5.0.7
Fortinet Fortimanager Firmware 5.0.8
Fortinet Fortimanager Firmware 5.0.5
Fortinet Fortimanager Firmware 5.0.6
Fortinet Fortimanager Firmware 5.2.1
Fortinet Fortimanager Firmware 5.0.3
Fortinet Fortimanager Firmware 5.0.4
Fortinet Fortimanager Firmware 5.0.11
Fortinet Fortimanager Firmware 5.2.0
Fortinet Fortimanager Firmware 5.0.1
Fortinet Fortimanager Firmware 5.0.2
Fortinet Fortimanager Firmware 5.0.9
Fortinet Fortimanager Firmware 5.0.10
Fortinet Fortianalyzer Firmware 5.0.9
Fortinet Fortianalyzer Firmware 5.0.8
Fortinet Fortianalyzer Firmware 5.0.1
Fortinet Fortianalyzer Firmware 5.0.0
Fortinet Fortianalyzer Firmware 5.0.11
Fortinet Fortianalyzer Firmware 5.0.10
Fortinet Fortianalyzer Firmware 5.0.3
Fortinet Fortianalyzer Firmware 5.0.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310
CVE-2024-21683
CVE-2024-22187
chrome
deserialization
XPath injection
CVE-2024-27842
denial of service
CVE-2024-24851
google
CVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »