Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*

part: a version: 7.0.1 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiadc (a63bc96c-c046-5a6a-841d-ae25edb16351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-39947 vulnerable 2026-06-08 05:47:18.968328 Details available
HIGH (8.6)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.2, FortiADC version 6.2.0 through 6.2.3, FortiADC version version 6.1.0 through 6.1.6, FortiADC version 6.0.0 through 6.0.4, FortiADC version 5.4.0 through 5.4.5 may allow an attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Published: 2023-01-03T16:58:37.035Z
Updated: 2024-10-23T14:50:58.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33876 vulnerable 2026-06-08 05:44:51.278202 Details available
MEDIUM (5.1)
Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to retrieve files with specific extension from the underlying Linux system via crafted HTTP requests.
Published: 2022-12-06T16:01:01.740Z
Updated: 2024-10-22T20:51:21.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33875 vulnerable 2026-06-08 05:44:51.275796 Details available
MEDIUM (5.1)
An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.2.4 and below allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Published: 2022-12-06T16:01:04.481Z
Updated: 2024-10-22T20:51:13.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27482 vulnerable 2026-06-08 05:41:55.318195 Details available
HIGH (7.4)
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.6, 6.0.x, 5.x.x allows attacker to execute arbitrary shell code as `root` via CLI commands.
Published: 2023-02-16T18:06:42.848Z
Updated: 2024-10-23T14:46:17.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26120 vulnerable 2026-06-08 05:41:50.582868 Details available
MEDIUM (5.4)
Multiple improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerabilities [CWE-89] in FortiADC management interface 7.0.0 through 7.0.1, 5.0.0 through 6.2.2 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Published: 2022-07-18T16:41:00.000Z
Updated: 2024-10-22T20:55:39.681Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.