Approved changes feed: RSS · Atom

cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*

part: h version: 5.2.5 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiadc (a63bc96c-c046-5a6a-841d-ae25edb16351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26210 vulnerable 2026-06-08 05:57:38.839749 Details available
HIGH (7.8)
Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests.
Published: 2023-06-13T08:41:46.873Z
Updated: 2026-01-14T14:15:28.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23439 vulnerable 2026-06-08 05:40:57.232197 Details available
MEDIUM (4.1)
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
Published: 2025-01-22T09:10:28.669Z
Updated: 2026-01-14T13:06:07.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42757 vulnerable 2026-06-08 05:35:22.831099 Details available
MEDIUM (6.3)
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.
Published: 2021-12-08T11:01:11.000Z
Updated: 2025-10-16T09:46:26.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36193 vulnerable 2026-06-08 05:32:49.930641 Details available
MEDIUM (6.3)
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.
Published: 2022-02-02T11:19:47.000Z
Updated: 2026-01-13T16:32:40.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.