Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*

part: a version: 7.2.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiadc (a63bc96c-c046-5a6a-841d-ae25edb16351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49813 vulnerable 2026-06-08 07:29:14.954060 Details available
MEDIUM (6.6)
An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters.
Published: 2025-08-12T18:59:19.468Z
Updated: 2026-02-26T17:48:59.044Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50180 vulnerable 2026-06-08 06:16:15.636831 Details available
MEDIUM (5.2)
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins.
Published: 2024-05-14T16:19:13.773Z
Updated: 2024-08-02T22:09:49.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41673 vulnerable 2026-06-08 06:11:06.377265 Details available
MEDIUM (6.9)
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.
Published: 2023-12-13T06:43:21.604Z
Updated: 2024-08-02T19:01:35.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29177 vulnerable 2026-06-08 06:02:39.000563 Details available
MEDIUM (6.2)
Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and before 7.1.2 & FortiDDoS-F version 6.5.0 and before 6.4.1 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI requests.
Published: 2023-11-14T18:07:59.407Z
Updated: 2024-08-30T18:09:33.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27999 vulnerable 2026-06-08 05:57:42.758391 Details available
HIGH (7.6)
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 through 7.1.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands.
Published: 2023-05-03T21:26:40.680Z
Updated: 2024-10-23T14:28:03.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27993 vulnerable 2026-06-08 05:57:42.739501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26210 vulnerable 2026-06-08 05:57:38.852738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.