Fortinet FortiSOAR 7.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:fortinet:fortisoar:7.2.0:*:*:*:*:*:*:*
part: a version: 7.2.0 update: *
| Vendor | Fortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947) |
|---|---|
| Product | Fortisoar (9a1c7a6a-0e0a-5329-be5f-750e33c067e8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-32932 |
vulnerable | 2026-06-08 07:19:01.211964 |
Details available
MEDIUM (6.2)
An Improper neutralization of input during web page generation ('cross-site scripting') vulnerability [CWE-79] in FortiSOAR version 7.6.1 and below, version 7.5.1 and below, 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions WEB UI may allow an authenticated remote attacker to perform an XSS attack via stored malicious service requests
Published: 2025-08-12T19:00:01.506Z
Updated: 2025-08-13T20:13:36.224Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45327 |
vulnerable | 2026-06-08 06:48:05.778910 |
Details available
HIGH (7.1)
An improper authorization vulnerability [CWE-285] in FortiSOAR version 7.4.0 through 7.4.3, 7.3.0 through 7.3.2, 7.2.0 through 7.2.2, 7.0.0 through 7.0.3 change password endpoint may allow an authenticated attacker to perform a brute force attack on users and administrators password via crafted HTTP requests.
Published: 2024-09-11T09:53:46.087Z
Updated: 2024-09-12T03:55:24.954Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36510 |
vulnerable | 2026-06-08 06:39:45.357532 |
Details available
MEDIUM (4.9)
An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, and FortiSOAR 7.5.0, 7.4.0 through 7.4.4, 7.3.0 through 7.3.2, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to enumerate valid users via observing login request responses.
Published: 2025-01-14T14:09:49.286Z
Updated: 2025-01-15T14:51:13.708Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21760 |
vulnerable | 2026-06-08 06:27:36.504875 |
Details available
HIGH (7.7)
An improper control of generation of code ('Code Injection') vulnerability [CWE-94] in FortiSOAR Connector FortiSOAR 7.4 all versions, 7.3 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker to execute arbitrary code on the host via a playbook code snippet.
Published: 2025-03-18T13:56:44.525Z
Updated: 2025-03-18T14:15:03.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42473 |
vulnerable | 2026-06-08 05:49:30.047405 |
Details available
MEDIUM (5.3)
A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password.
Published: 2022-11-02T00:00:00.000Z
Updated: 2024-10-22T20:52:17.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38379 |
vulnerable | 2026-06-08 05:47:16.251728 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35847 |
vulnerable | 2026-06-08 05:46:05.863786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30298 |
vulnerable | 2026-06-08 05:43:37.853987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29062 |
vulnerable | 2026-06-08 05:42:46.411830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29061 |
vulnerable | 2026-06-08 05:42:46.411139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.