GCVE - cpe:2.3:o:fortinet:fortianalyzer_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortianalyzer_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortianalyzer Firmware (`ead3876e-d111-530a-b013-0c8600938ad4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-17541`	vulnerable	2026-06-08 05:09:09.561822	Details available A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature. Published: 2018-07-16T20:00:00.000Z Updated: 2024-10-25T14:08:48.618Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-17-305 http://www.securitytracker.com/id/1041246 http://www.securitytracker.com/id/1041247	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2336`	vulnerable	2026-06-08 05:05:28.471465	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2334 and CVE-2014-2335. Published: 2014-10-31T14:00:00.000Z Updated: 2024-08-06T10:14:25.153Z Open on db.gcve.eu Reference links http://www.fortiguard.com/advisory/FG-IR-14-033/ http://www.securityfocus.com/bid/70889 http://secunia.com/advisories/61309 https://exchange.xforce.ibmcloud.com/vulnerabilities/98479	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2335`	vulnerable	2026-06-08 05:05:28.464199	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336. Published: 2014-10-31T14:00:00.000Z Updated: 2024-08-06T10:14:25.031Z Open on db.gcve.eu Reference links http://www.fortiguard.com/advisory/FG-IR-14-033/ http://secunia.com/advisories/61309 https://exchange.xforce.ibmcloud.com/vulnerabilities/98478	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2334`	vulnerable	2026-06-08 05:05:28.463817	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-2336. Published: 2014-10-31T14:00:00.000Z Updated: 2024-08-06T10:14:25.155Z Open on db.gcve.eu Reference links http://www.fortiguard.com/advisory/FG-IR-14-033/ http://secunia.com/advisories/61309 https://exchange.xforce.ibmcloud.com/vulnerabilities/98477 http://www.securityfocus.com/bid/70887	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6826`	vulnerable	2026-06-08 05:05:07.051877	Details available cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrf_token parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks. Published: 2013-11-19T19:00:00.000Z Updated: 2024-09-16T23:56:53.683Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/123980/fortianalyzer-xsrf.txt http://www.securityfocus.com/bid/63663	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.