GCVE - cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*

part: h version: 6.0.2 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortiadc (`a63bc96c-c046-5a6a-841d-ae25edb16351`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-36511`	vulnerable	2026-06-08 06:39:45.413712	Details available LOW (3.4) An improperly implemented security check for standard vulnerability [CWE-358] in FortiADC Web Application Firewall (WAF) 7.4.0 through 7.4.4, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions, 6.0 all versions when cookie security policy is enabled may allow an attacker, under specific conditions, to retrieve the initial encrypted and signed cookie protected by the feature Published: 2024-09-10T14:37:47.230Z Updated: 2024-09-10T17:34:14.478Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-22-256	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37933`	vulnerable	2026-06-08 06:08:16.409137	Details available HIGH (8.6) An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC GUI version 7.4.0, 7.2.0 through 7.2.1 and before 7.1.3 allows an authenticated attacker to perform an XSS attack via crafted HTTP or HTTPs requests. Published: 2025-03-11T14:54:35.895Z Updated: 2026-02-26T19:09:40.814Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-216	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26210`	vulnerable	2026-06-08 05:57:38.819825	Details available HIGH (7.8) Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests. Published: 2023-06-13T08:41:46.873Z Updated: 2026-01-14T14:15:28.898Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-076	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23439`	vulnerable	2026-06-08 05:40:57.218790	Details available MEDIUM (4.1) A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver Published: 2025-01-22T09:10:28.669Z Updated: 2026-01-14T13:06:07.365Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-23-494	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42757`	vulnerable	2026-06-08 05:35:22.817002	Details available MEDIUM (6.3) A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments. Published: 2021-12-08T11:01:11.000Z Updated: 2025-10-16T09:46:26.239Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-173	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36193`	vulnerable	2026-06-08 05:32:49.904074	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.