Fortinet FortiAnalyzer Big Data 7.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*
part: a version: 7.4.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortianalyzer Big Data (ff7a1021-e2bc-56b2-99ff-facf05fc762c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-40584 |
vulnerable | 2026-06-08 06:43:52.496219 |
Details available
MEDIUM (6.8)
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13, Fortinet FortiAnalyzer BigData version 7.4.0, 7.2.0 through 7.2.7, 7.0.1 through 7.0.6, 6.4.5 through 6.4.7 and 6.2.5, Fortinet FortiAnalyzer Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 and Fortinet FortiManager Cloud version 7.4.1 through 7.4.3, 7.2.1 through 7.2.5, 7.0.1 through 7.0.13 and 6.4.1 through 6.4.7 GUI allows an authenticated privileged attacker to execute unauthorized code or commands via crafted HTTPS or HTTP requests.
Published: 2025-02-11T16:09:07.423Z
Updated: 2025-02-12T15:53:33.827Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33501 |
vulnerable | 2026-06-08 06:37:31.257635 |
Details available
MEDIUM (4)
Two improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5, FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via specifically crafted CLI requests.
Published: 2025-03-11T14:54:41.662Z
Updated: 2025-03-11T16:04:54.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32118 |
vulnerable | 2026-06-08 06:35:32.774519 |
Details available
MEDIUM (6.3)
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer-BigData before 7.4.0 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Published: 2024-11-12T18:53:56.156Z
Updated: 2024-11-12T20:27:32.113Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32117 |
vulnerable | 2026-06-08 06:35:32.762324 |
Details available
MEDIUM (4.7)
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker to read arbitrary files from the underlying system via crafted HTTP or HTTPs requests.
Published: 2024-11-12T18:53:50.491Z
Updated: 2024-11-12T20:28:55.063Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32116 |
vulnerable | 2026-06-08 06:35:32.756843 |
Details available
MEDIUM (4.8)
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests.
Published: 2024-11-12T18:53:54.318Z
Updated: 2024-11-13T18:45:12.057Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31496 |
vulnerable | 2026-06-08 06:35:31.933827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23666 |
vulnerable | 2026-06-08 06:29:40.193390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.