Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortimanager_firmware:5.2.2:*:*:*:*:*:*:*

part: o version: 5.2.2 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortimanager Firmware (f8df1aa3-6688-59f3-9dfc-a047dd66b99b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-8495 vulnerable 2026-06-08 05:08:14.324849 Details available
An improper certificate validation vulnerability in Fortinet FortiManager 5.0.6 through 5.2.7 and 5.4.0 through 5.4.1 allows remote attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack via the Fortisandbox devices probing feature.
Published: 2017-02-13T15:00:00.000Z
Updated: 2024-10-25T14:40:29.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3196 vulnerable 2026-06-08 05:07:45.020666 Details available
Cross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an image uploaded in the report section.
Published: 2016-08-05T14:00:00.000Z
Updated: 2024-08-05T23:47:58.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3195 vulnerable 2026-06-08 05:07:45.019196 Details available
Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.053Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3194 vulnerable 2026-06-08 05:07:45.017978 Details available
Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.6 and FortiAnalyzer 5.x before 5.0.13 and 5.2.x before 5.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3193 vulnerable 2026-06-08 05:07:45.002773 Details available
Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 and FortiAnalyzer 5.x before 5.0.13, 5.2.x before 5.2.6, and 5.4.x before 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-08-19T21:00:00.000Z
Updated: 2024-08-05T23:47:59.032Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.