Fortinet Fortimanager, Fortianalyzer
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinet_fortimanager,_fortianalyzer:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinet Fortimanager, Fortianalyzer (74fdbdf1-2373-5d28-8c2f-a5eb08458a1d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-27483 |
vulnerable | 2026-06-08 05:41:55.319979 |
Details available
HIGH (7.2)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 through 6.4.7, 6.2.x and 6.0.x allows attacker to execute arbitrary shell code as `root` user via `diagnose system` CLI commands.
Published: 2022-07-18T16:40:20.000Z
Updated: 2024-10-25T13:30:52.271Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22300 |
vulnerable | 2026-06-08 05:40:08.140134 |
Details available
MEDIUM (4.3)
A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2, FortiManager version 5.6.0 through 5.6.11, FortiManager version 6.0.0 through 6.0.11, FortiManager version 6.2.0 through 6.2.9, FortiManager version 6.4.0 through 6.4.7, FortiManager version 7.0.0 through 7.0.2 allows attacker to bypass the device policy and force the password-change action for its user.
Published: 2022-03-01T18:25:16.000Z
Updated: 2024-10-22T21:01:00.396Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36170 |
vulnerable | 2026-06-08 05:32:49.840958 |
Details available
LOW (3.2)
An information disclosure vulnerability [CWE-200] in FortiAnalyzerVM and FortiManagerVM versions 7.0.0 and 6.4.6 and below may allow an authenticated attacker to read the FortiCloud credentials which were used to activate the trial license in cleartext.
Published: 2021-10-06T09:22:29.000Z
Updated: 2024-10-25T13:49:27.613Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12811 |
vulnerable | 2026-06-08 05:17:59.325712 |
Details available
An improper neutralization of script-related HTML tags in a web page in FortiManager 6.2.0, 6.2.1, 6.2.2, and 6.2.3and FortiAnalyzer 6.2.0, 6.2.1, 6.2.2, and 6.2.3 may allow an attacker to execute a cross site scripting (XSS) via the Identify Provider name field.
Published: 2020-09-24T13:36:12.000Z
Updated: 2024-10-25T14:00:35.701Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17541 |
vulnerable | 2026-06-08 05:09:09.561238 |
Details available
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0, 5.6.4 and below versions allows inject Javascript code and HTML tags through the CN value of CA and CRL certificates via the import CA and CRL certificates feature.
Published: 2018-07-16T20:00:00.000Z
Updated: 2024-10-25T14:08:48.618Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.