Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortiddos-f:6.1.0:*:*:*:*:*:*:*

part: o version: 6.1.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiddos F (884f37cb-03f7-51e1-91ee-adb52cc5fd63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45325 vulnerable 2026-06-08 06:45:56.042352 Details available
MEDIUM (6.5)
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.
Published: 2025-09-09T13:50:41.345Z
Updated: 2025-09-09T14:11:17.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23439 vulnerable 2026-06-08 05:40:57.459286 Details available
MEDIUM (4.1)
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitrary webserver
Published: 2025-01-22T09:10:28.669Z
Updated: 2026-01-14T13:06:07.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42757 vulnerable 2026-06-08 05:35:22.659584 Details available
MEDIUM (6.3)
A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments.
Published: 2021-12-08T11:01:11.000Z
Updated: 2025-10-16T09:46:26.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36193 vulnerable 2026-06-08 05:32:50.017040 Details available
MEDIUM (6.3)
Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted commands.
Published: 2022-02-02T11:19:47.000Z
Updated: 2026-01-13T16:32:40.255Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.