Fortinet FortiAIOps 2.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortiaiops:2.0.0:*:*:*:*:*:*:*
part: a version: 2.0.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortiaiops (f763f8cf-6292-5792-9d4e-400387439526) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/fortinet-solutions-cse/fortiosapi |
purl2cpe | 2026-06-01 10:12:50.991455 |
pkg:pypi/fortiosapi |
purl2cpe | 2026-06-01 10:12:50.991458 |
pkg:rpm/opensuse/python-fortiosapi |
purl2cpe | 2026-06-01 10:12:50.991462 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27785 |
vulnerable | 2026-06-08 06:31:29.236695 |
Details available
MEDIUM (5.1)
An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authenticated attacker to execute arbitrary commands on a client's workstation via poisoned CSV reports.
Published: 2024-07-09T15:33:27.182Z
Updated: 2026-01-09T16:32:32.996Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27784 |
vulnerable | 2026-06-08 06:31:29.236385 |
Details available
HIGH (8.3)
Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files.
Published: 2024-07-09T15:33:27.590Z
Updated: 2026-01-09T16:34:54.891Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27783 |
vulnerable | 2026-06-08 06:31:29.236025 |
Details available
HIGH (7.2)
Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remote attacker to perform arbitrary actions on behalf of an authenticated user via tricking the victim to execute malicious GET requests.
Published: 2024-07-09T15:33:27.135Z
Updated: 2026-01-09T16:36:14.759Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27782 |
vulnerable | 2026-06-08 06:31:29.235622 |
Details available
HIGH (7.7)
Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.
Published: 2024-07-09T15:33:30.678Z
Updated: 2026-01-09T16:36:59.722Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.