Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortimanager_firmware:5.2.1:*:*:*:*:*:*:*

part: o version: 5.2.1 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortimanager Firmware (f8df1aa3-6688-59f3-9dfc-a047dd66b99b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8495 vulnerable 2026-06-08 05:08:14.324353 Details available
An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
Published: 2017-02-13T15:00:00.000Z
Updated: 2024-10-25T14:40:29.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3196 vulnerable 2026-06-08 05:07:45.020647 Details available
Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section.
Published: 2016-08-05T14:00:00.000Z
Updated: 2024-08-05T23:47:58.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3195 vulnerable 2026-06-08 05:07:45.019180 Details available
Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3194 vulnerable 2026-06-08 05:07:45.017960 Details available
Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3193 vulnerable 2026-06-08 05:07:45.001999 Details available
Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7363 vulnerable 2026-06-08 05:07:00.503610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3620 vulnerable 2026-06-08 05:06:38.392202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3617 vulnerable 2026-06-08 05:06:38.384593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3616 vulnerable 2026-06-08 05:06:38.383945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3615 vulnerable 2026-06-08 05:06:38.383226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3614 vulnerable 2026-06-08 05:06:38.377331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.