GCVE - cpe:2.3:a:fortinet:fortinet_fortisoar:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortinet_fortisoar:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortinet Fortisoar (`6ea0e7a9-d6a0-5588-878f-898c99ddadbd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-42473`	vulnerable	2026-06-08 05:49:30.045746	Details available MEDIUM (5.3) A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password. Published: 2022-11-02T00:00:00.000Z Updated: 2024-10-22T20:52:17.735Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-22-216	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-35847`	vulnerable	2026-06-08 05:46:05.862137	Details available MEDIUM (6.3) An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute arbitrary code via a crafted payload. Published: 2022-09-06T15:15:28.000Z Updated: 2024-10-22T20:53:52.298Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-22-306	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30298`	vulnerable	2026-06-08 05:43:37.852565	Details available HIGH (7) An improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has already found a way to modify system files (via another, unrelated and hypothetical exploit) to execute arbitrary Python commands as root. Published: 2022-09-06T15:10:29.000Z Updated: 2024-10-25T13:30:11.492Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-22-152	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29062`	vulnerable	2026-06-08 05:42:46.411761	Details available MEDIUM (6.3) Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to the underlying filesystem with nginx permissions via crafted HTTP requests. Published: 2022-09-06T15:10:24.000Z Updated: 2024-10-22T20:54:27.903Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-22-154	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29061`	vulnerable	2026-06-08 05:42:46.409874	Details available HIGH (7.2) An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to execute unauthorized code or commands via crafted HTTP GET requests. Published: 2022-09-09T06:55:08.000Z Updated: 2024-10-25T13:29:59.848Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-22-156	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23443`	vulnerable	2026-06-08 05:40:57.538484	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.