Fortinet Fortianalyzer, Fortimanager
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortinet_fortianalyzer,_fortimanager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortinet Fortianalyzer, Fortimanager (c056c0ef-3eab-53b6-bcc5-e4b9f4b22ae2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39950 |
vulnerable | 2026-06-08 05:47:18.973282 |
Details available
HIGH (8)
An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAnalyzer 6.0.0 all versions, 6.2.0 all versions, 6.4.0 through 6.4.8, and 7.0.0 through 7.0.4. Report templates may allow a low privilege level attacker to perform an XSS attack via posting a crafted CKeditor "protected" comment as described in CVE-2020-9281.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-25T13:17:01.104Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32603 |
vulnerable | 2026-06-08 05:32:07.641105 |
Details available
HIGH (8.8)
A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests.
Published: 2021-08-05T10:41:00.000Z
Updated: 2024-10-25T13:51:51.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32598 |
vulnerable | 2026-06-08 05:32:07.634840 |
Details available
MEDIUM (4.3)
An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body of the response.
Published: 2021-08-05T10:35:45.000Z
Updated: 2024-10-25T13:52:01.552Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32597 |
vulnerable | 2026-06-08 05:32:07.634213 |
Details available
MEDIUM (4.6)
Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below user interface, may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious payload in GET parameters.
Published: 2021-08-06T10:48:20.000Z
Updated: 2024-10-25T13:51:39.369Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32587 |
vulnerable | 2026-06-08 05:32:07.511619 |
Details available
MEDIUM (4.3)
An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker with restricted user profile to retrieve the list of administrative users of other ADOMs and their related configuration.
Published: 2021-08-06T10:51:07.000Z
Updated: 2024-10-25T13:51:28.751Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24022 |
vulnerable | 2026-06-08 05:30:03.484517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.