Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortimanager_firmware:5.0.5:*:*:*:*:*:*:*

part: o version: 5.0.5 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortimanager Firmware (f8df1aa3-6688-59f3-9dfc-a047dd66b99b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8495 vulnerable 2026-06-08 05:08:14.319952 Details available
An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
Published: 2017-02-13T15:00:00.000Z
Updated: 2024-10-25T14:40:29.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3196 vulnerable 2026-06-08 05:07:45.020425 Details available
Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section.
Published: 2016-08-05T14:00:00.000Z
Updated: 2024-08-05T23:47:58.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3195 vulnerable 2026-06-08 05:07:45.019052 Details available
Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3194 vulnerable 2026-06-08 05:07:45.017827 Details available
Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3193 vulnerable 2026-06-08 05:07:44.995107 Details available
Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7363 vulnerable 2026-06-08 05:07:00.499643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3620 vulnerable 2026-06-08 05:06:38.392080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3617 vulnerable 2026-06-08 05:06:38.384479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3616 vulnerable 2026-06-08 05:06:38.383833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3615 vulnerable 2026-06-08 05:06:38.383103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3614 vulnerable 2026-06-08 05:06:38.373906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.