Approved changes feed: RSS · Atom

cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*

part: h version: 7.0.6 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiadc (a63bc96c-c046-5a6a-841d-ae25edb16351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59921 vulnerable 2026-06-08 07:35:23.423379 Details available
MEDIUM (6.2)
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests.
Published: 2025-10-14T15:23:42.754Z
Updated: 2026-01-14T09:17:57.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54971 vulnerable 2026-06-08 07:33:13.857163 Details available
LOW (3.9)
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password via the logs of the product
Published: 2025-11-18T17:01:17.182Z
Updated: 2026-01-14T09:19:42.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48839 vulnerable 2026-06-08 07:29:12.050834 Details available
MEDIUM (6.3)
An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests.
Published: 2025-11-18T17:01:25.620Z
Updated: 2026-02-26T16:21:11.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31104 vulnerable 2026-06-08 07:17:02.404702 Details available
HIGH (7)
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiADC 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2.0 through 7.2.7, 7.1.0 through 7.1.4, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated attacker to execute unauthorized code via crafted HTTP requests.
Published: 2025-06-10T16:36:13.131Z
Updated: 2026-02-26T17:50:59.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26210 vulnerable 2026-06-08 05:57:38.802379 Details available
HIGH (7.8)
Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests.
Published: 2023-06-13T08:41:46.873Z
Updated: 2026-01-14T14:15:28.898Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.