fortinet fortios 7.4.1 vulnerabilities and exploits

(subscribe to this query)

An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 up to and including 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 up to and including 7.4.1 allows an authenticated malicious user to perform elevated actions vi...

Fortinet Fortios Fortinet Fortiproxy Fortinet Fortiproxy 7.4.0 Fortinet Fortiproxy 7.4.1 Fortinet Fortios 7.2.5 Fortinet Fortios 7.4.0 Fortinet Fortios 7.4.1

An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 up to and including 7.4.1, version 7.2.0 up to and including 7.2.7 and prior to 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 up to and incl...

Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.0 Fortinet Fortiproxy 7.4.0 Fortinet Fortios 7.0.0 Fortinet Fortios 6.4.0 Fortinet Fortios 6.2.0 Fortinet Fortiproxy 7.2.0 Fortinet Fortiproxy 7.0.0 Fortinet Fortiproxy 2.0.0 Fortinet Fortiproxy Fortinet Fortios Fortinet Fortiproxy 7.4.1

An improper certificate validation vulnerability in Fortinet FortiOS 7.0.0 - 7.0.13, 7.2.0 - 7.2.6, 7.4.0 - 7.4.1 and 6.4 all versions allows a remote and unauthenticated malicious user to perform a Man-in-the-Middle attack on the FortiLink communication channel between the Forti...

Fortinet Fortios Fortinet Fortios 7.4.0 Fortinet Fortios 7.4.1

A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 up to and including 7.2.6 and version 7.4.0 up to and including 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or H...

Fortinet Fortios 7.2.1 Fortinet Fortios 7.4.0 Fortinet Fortios Fortinet Fortios 7.4.1

A out-of-bounds write in Fortinet FortiOS 7.4.0 up to and including 7.4.1, 7.2.0 up to and including 7.2.5, 7.0.0 up to and including 7.0.12, 6.4.0 up to and including 6.4.14, 6.2.0 up to and including 6.2.15, FortiProxy 7.4.0, 7.2.0 up to and including 7.2.6, 7.0.0 up to and inc...

Fortinet Fortios Fortinet Fortipam Fortinet Fortiproxy Fortinet Fortiproxy 7.4.0 Fortinet Fortios 7.4.0 Fortinet Fortios 7.4.1

2 Articles

An insertion of sensitive information into sent data vulnerability [CWE-201] in FortiOS 7.6.0, 7.4.0 up to and including 7.4.4 may allow an attacker in a man-in-the-middle position to retrieve the RADIUS accounting server shared secret via intercepting accounting-requests.

Fortinet Fortios 7.6.0 Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios

A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 up to and including 7.2.8 and version 7.4.0 up to and including 7.4.4 allows a remote unauthenticated malicious user to execute arbitrary code or commands via crafted UDP packets through the C...

Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.8 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios

An improper neutralization of crlf sequences in http headers ('http response splitting') in Fortinet FortiOS 7.2.0 up to and including 7.6.0, FortiProxy 7.2.0 up to and including 7.4.5 allows malicious user to execute unauthorized code or commands via crafted HTTP heade...

Fortinet Fortios 7.6.0 Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.8 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4 Fortinet Fortios 7.2.3

An Integer Overflow or Wraparound vulnerability [CWE-190] in version 7.4.4 and below, version 7.2.10 and below; FortiSASE version 23.4.b FortiOS tenant IPsec IKE service may allow an authenticated malicious user to crash the IPsec tunnel via crafted requests, resulting in potenti...

Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.10 Fortinet Fortios 7.2.9 Fortinet Fortios 7.2.8 Fortinet Fortios 7.2.7 Fortinet Fortios 7.2.6 Fortinet Fortios 7.2.5 Fortinet Fortios 7.2.4

A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager versions 7.6.0 up to and including 7.6.1, 7.4.1 up to and including 7.4.3, FortiOS versions 7.6.0, 7.4.0 up to and including 7.4.4, 7.2.5 up to and including 7.2.9,...

Fortinet Fortimanager 7.6.1 Fortinet Fortimanager 7.6.0 Fortinet Fortimanager 7.4.3 Fortinet Fortimanager 7.4.2 Fortinet Fortimanager 7.4.1 Fortinet Fortios 7.6.0 Fortinet Fortios 7.4.4 Fortinet Fortios 7.4.3 Fortinet Fortios 7.4.2 Fortinet Fortios 7.4.1 Fortinet Fortios 7.4.0 Fortinet Fortios 7.2.9

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook