Fortinet FortiADC 7.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*

part: a version: 7.1.0 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortiadc (a63bc96c-c046-5a6a-841d-ae25edb16351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50180 vulnerable 2026-06-08 06:16:15.636087 Details available
MEDIUM (5.2)
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC version 7.4.1 and below, version 7.2.3 and below, version 7.1.4 and below, version 7.0.5 and below, version 6.2.6 and below may allow a read-only admin to view data pertaining to other admins.
Published: 2024-05-14T16:19:13.773Z
Updated: 2024-08-02T22:09:49.697Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41673 vulnerable 2026-06-08 06:11:06.370929 Details available
MEDIUM (6.9)
An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests.
Published: 2023-12-13T06:43:21.604Z
Updated: 2024-08-02T19:01:35.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28000 vulnerable 2026-06-08 05:57:42.759083 Details available
MEDIUM (6.3)
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC CLI 7.1.0, 7.0.0 through 7.0.3, 6.2.0 through 6.2.4, 6.1 all versions, 6.0 all versions may allow a local and authenticated attacker to execute unauthorized commands via specifically crafted arguments in diagnose system df CLI command.
Published: 2023-06-13T08:41:47.901Z
Updated: 2024-10-23T14:26:03.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26210 vulnerable 2026-06-08 05:57:38.851458 Details available
HIGH (7.8)
Multiple improper neutralization of special elements used in an os command ('OS Command Injection') vulnerabilties [CWE-78] vulnerability in Fortinet allows a local authenticated attacker to execute arbitrary shell code as `root` user via crafted CLI requests.
Published: 2023-06-13T08:41:46.873Z
Updated: 2026-01-14T14:15:28.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26205 vulnerable 2026-06-08 05:57:38.785184 Details available
HIGH (7.9)
An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script.
Published: 2023-11-14T18:05:48.807Z
Updated: 2025-12-16T18:23:25.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25607 vulnerable 2026-06-08 05:56:09.337137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25603 vulnerable 2026-06-08 05:56:09.329926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35851 vulnerable 2026-06-08 05:46:05.868461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33876 vulnerable 2026-06-08 05:44:51.278238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33875 vulnerable 2026-06-08 05:44:51.277619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.