Fortinet FortiManager 7.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*
part: a version: 7.0.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortimanager (093c7bb2-b519-59b3-baba-ea03ca132751) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-42791 |
vulnerable | 2026-06-08 06:11:09.424510 |
Details available
HIGH (8.6)
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
Published: 2024-02-20T13:19:20.221Z
Updated: 2024-08-02T19:30:24.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22305 |
vulnerable | 2026-06-08 05:40:08.162156 |
Details available
MEDIUM (5.4)
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers.
Published: 2023-09-01T11:43:03.878Z
Updated: 2024-09-27T18:40:07.999Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32589 |
vulnerable | 2026-06-08 05:32:07.616071 |
Details available
HIGH (7.7)
A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device.
Published: 2024-12-19T12:22:32.543Z
Updated: 2024-12-20T21:55:26.925Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.